> Their thinking is that if someone runs their app on a custom ROM and uses that to manipulate the app in any way, and that causes some extremely hypothetical damage, that they might be held liable for not having prevented this situation.

Unfortunately, due to the regulations that have blown up in the EU in the last decade, they are right.