That Was not theoretical whatsoever, and a great deal a thing that may very well be made use of with out detection, regardless of whether the customers confirmed fingerprints, as it created customers generate insecure keys. MTProto takes advantage of AES in IGE method (see this, if you wonder how https://www.mtpoto.com/