You're assuming the application that wants to protect its assets and other IP will let you run it in a simulator which is not going to be the case.