maybe I'm dumb but I also don't understand what they mean with the single use passes. why can't they be encrypted without a server? shouldn't a rotating mac take care of everything possible? maybe they're trying to say you can't exchange info without their app, but that doesn't make any sense either