tl;dr: TikTok exploited an android security hole to collect MAC addresses likely for targeted advertising.