They can just repackage the web app and mod that if all else fails.