<p>despite how janky-looking it is, their cryptographic scheme actually includes _some_ measure of replay protection (there's a sequence number in the encrypted blob)</p><p>it's still malleable, of course; you could conceivably flip bits in the ciphertext in the known positions to advance it</p>
