Your KMP library is only as protected as its weakest target. And the attacker knows it. (opens in new tab)

There is a line I like to repeat whenever the subject is Kotlin Multiplatform security: you write one thing, but you defend N.