I'm curious as to how this happens - are app comms not SSL ? I never gave it much thought but I assumed that, like the adoption of SSL everywhere for websites,

I'm curious as to how this happens - are app comms not SSL ? I never gave it much thought but I assumed that, like the adoption of SSL everywhere for websites, all apps spoke only SSL ... does the app store not enforce this ?