Even if they check for impersonation, it doesn’t change what the app actually does once you interact with it