Forensic research shows that Max, a Russian super-app for messaging, payments and government services, functions as a "backdoor" giving authorities surveillance access to its entire mini-app ecosystem on users' devices. Tens of millions of Russians were forced to install the app over 18 months, and