It is obvious that there is some security concern involved, considering the exposure of private API's and etc.
I took apart the Disney Parks App as I was frustrated at the fact the full information therein was only available if you're physically inside the park.
Firstly, I used an American friends App-Store account to download the app, as it was not on the UK App-Store and you need an US credit card to set up a US account (Please correct me if I am wrong here.)
Next I used Fake Location, a €3 app from the Cydia store on my jailbroken iPhone, so I could convince the app I was 4500 miles away in Florida in the sun.
Finally, I used "mitmproxy" on my Mac, to proxy the web access the Disney app was making to the server, and noted the URL's and over time worked out the structure of the API and it's JSON replies.
Hope this is of use :-)
There are only so many HelloWorld tutorials I can read/implement (in other languages, non-mobile), before getting bored of doing tiny, completely unrealistic things with code. Seeing how a larger codebase, particularly one that I've been using as an app for some time, is structured and hangs off device services (lbs, vibration, or even just graphics) is of huge interest to me
Not sure how easy it would be to open them up given that cracked apps appear on jailbreak sites all the time, if the DRM can be removed there must be access to the source code.