Why authorization architecture is probably fragile
iOS Privacy: How we tricked our users into trusting us with their bank accounts