The phone also needs to be rooted for any of the attacks to work.

At least that's what the manufacturer's AI generated article says: https://eidas-pro.com/blog/eu-age-verification-app-hack-expl...