I understand (but vehemently oppose) the argument for root detection. What risks to banks see from having developer settings enabled?