So the vulnerability here was the iphone, not the app.