I think that's a serious backdoor for a coercive attacker. They only need access to the original device once and can then assume the identity of the contact on

I think that's a serious backdoor for a coercive attacker. They only need access to the original device once and can then assume the identity of the contact on another device.