Possible bypass of tapjacking protection?
A user reported what sounds like a way to bypass tapjacking protection: "When the app notifies for an overlay, I can bypass that by pressing continue and then redoing what I wanted to do."
After the dialog is dismissed we should continue to block touch events that have passed through the overlay. I'll contact the user to clarify what's happening.