Even if you’re using open source libraries and the connection is encrypted end-to-end you could be attacked if you’re not auditing the code (and let’s be honest, most of us are not and probably don’t have time to).
Don’t take on new dependencies lightly.
The SDKs included in an iOS app run in the same scope as your app, meaning they get access to the same
- keychain data
- files
- app permission (hello location data and photo library)
- other sensitive user data (passwords, keys, camera)