Seems doubtful that this security will be very strong. It won't be hard to spoof an official client.
If they’ve done it using Secure Enclave it’s essentially physically impossible to spoof.
alt Hacker News
If they’ve done it using Secure Enclave it’s essentially physically impossible to spoof.