Do you know if TestFlight uses the same entitlements parsing logic? It may have been possible to exploit users' devices through beta versions.