As we have seen, apps decay over time. So someone has to keep track of the app. Also, given unlimited time, all cryptographic algorithms can be brute forced, especially something that has the same key for all hashes. So, now you have the problem of maintaining a key for your "counterfeit detection", and somehow get older keys revoked. Do you see a ledger now?