Yeah, something like that would not have prevented the account takeover part, though, which relies on Telegram's own files; or the access to cached files.