Attacking the trusted certificate with a supply-chain attack will be a future issue. Would make for an interesting discovery for the app company (if they have any good logging) as the attacker would need to forward all the victim's traffic to legitimate API's. Attacker might use proxies to hide this

This article was written by AI, and I would seriously doubt the value of a number of these methods. "Bypassing" SSL pinning with Burp proxy is a little bit like telling someone to avoid public transit and take a bus instead.