Transmitted data is logged between the device and the backend service. An attacker could use these logs to perform a replay attack to replicate calls.