[xani_]

The device is not checking app's hash tho, it has no way to verify that the usb frame containing that hash is really from app A

[craggyjaggy]

The app runs on the USB device. The code is loaded from the host, and if it hashes to the correct value, it will be able to access the secrets on the Tillitis.