[thedufer]

CLUT is explained well enough elsewhere in this thread that I won't repeat, but it seems very clear that the API allows them to change color palettes but does not do anything like read/write access to the screen. As far as I can tell, the worst thing they could do with it is make the screen go all one color so nothing is visible. Which would suck for the user, but the app writer gains nothing and would be quickly caught (if it even made it through the review process).