> so they'd need to build entirely new distribution functionality in addition to the backdoored app. In to order to do debugging or a slow rollout, I can see t

> so they'd need to build entirely new distribution functionality in addition to the backdoored app. In to order to do debugging or a slow rollout, I can see them implementing this in their backend. They’re can target updates at least by some combination of properties. Once that’s in place it might not be hard to throw a unique identifier in there as well.