That Was not theoretical in the least, and very much something that may be applied without the need of detection, even when the consumers verified fingerprints, as it created customers build insecure keys. MTProto makes use of AES in IGE method (see this, when you ponder how one can securely https://www.mtpoto.com/