@iam_zachi Reverse engineering government applications and extracting their keys is classified as "unauthorized access" and a cybercrime (Articles 3 and 6 of the Saudi Penal Code).
Instead of pursuing legal action for hacking, the authority opted for geographical restrictions on access: