@feld @grishka I want to further clarify that the ExpoToken that the app generates and sends to the server is useless unless you have our expo API key, so you can't abuse access to FCM or APNS