> Yes, many security researchers routinely examine traffic from these apps to see what’s being communicated with the servers.

For my own learning, I'm interested in this and what methods are used. Do you have any resources (blogs, videos, etc of these security researchers who are looking at these apps) you were thinking about in particular when you wrote this?