Cert pinning can be circumvented w/ a rooted or jailbroken device.