That Was not theoretical in any way, and greatly a thing that could be applied with no detection, whether or not the end users confirmed fingerprints, since it designed clients produce insecure keys. MTProto takes advantage of AES in IGE method (see this, should you ponder how you can securely https://www.mtpoto.com/