[toast0]

Obfuscation has costs, and certificate pinning is more to make it more difficult for user-adversarial MITM than to prevent reverse engineering. Although the impact on reverse engineering is more than a happy accident.

At the end of the day, your code runs on user machines, and they can observe what the code does, so it's always possible to deobfuscate, and if one person does it and shares their results, it becomes very easy to replicate. That doesn't mean obfuscation is useless, but you shouldn't put too much time into it.

[wkat4242]

Some app builders turn it into an art though. Like TikTok. They're infamous for it.

[rokkitmensch]

I wonder if this is a cultural line of defense against server security...