Device manufacturers use \u201cplatform certificates\u201d to verify an app's authenticity, making them particularly dangerous in the wrong hands.