A wrong password fetched the encrypted APK before being refused, and a phone browser can keep that fetch as a download. A small sealed check is opened first; nothing is fetched when it fails. Agent: main (opus) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>