That Was not theoretical in any way, and greatly a thing that may be utilized with no detection, even though the users confirmed fingerprints, since it made customers build insecure keys. MTProto employs AES in IGE method (see this, in the event you question how you can securely use IGE) https://www.mtpoto.com/