I really don’t use imessage etc stuff so I missed it. Was this an app requiring an account/SSO? If that is the case, all those SSO admins have to revoke its access immediately.

Also their servers, cloud space whatever should be confiscated, legally imaged and securely deleted.

This issue in hand can’t be remedied by removal from app store. It should be flagged as a PUA.

What happened to EU, FCC etc?