Worse, since apps are a closed platform, app makers can invoke IP law to criminalize anyone who reverse-engineers them to figure out how they're ripping you off. Removing the encryption from an app is a potential felony punishable by a five-year prison sentence and a $500k fine (an app is just a web-page skinned in enough IP to make it a crime to install a privacy blocker on it):
https://pluralistic.net/2024/08/15/private-law/#thirty-percent-vig
12/