Someone pointed an AI agent at 1.8 million Android apps, scanned them for secrets, and did it fast enough that the operational bottleneck was never the hacking. It was whatever came before and after. That's the part worth sitting with. Context Scanning APKs for hardcoded API keys and leaked credentials is not new. It's one of the oldest tricks in mobile appsec, and there are entire categories of tooling built around exactly this. Researchers and bug bounty hunters have been doing...