Hypothesis 1, debugging: requires full copies of system libraries
Hypothesis 2, fingerprinting: requires hashes of application libraries
Evidence: full copies of system libraries are being uploaded
How are you using that evidence to be so confident in hypothesis 2 and confidently against hypothesis 1?
