Oh I think I understand the parent better now: he is the author of app X, and someone releases X' which is X with bogus libs/ads/etc with the Enterprise Cert.

The user of X' reports bugs to him/her as if it was legit X running, so he gets reports that don't really come from his/her app.