Not if the server key is just hardcoded into the app, which can be appropriate in some cases; of course, that raises the question of how to secure the app download, but that's usually done over a separate protocol anyway.
In fact, the app ships with a bunch of RSA 2048 keys that are used for that part. But there is no revocation support.
Yeah that's generally the downside of cert pinning / hardcoding. The upside is people can't install extra certs.