But I want to let someone MITM my non-technical friend and repalce my APK with malware.