No, App will pass their key to ADAL in case of SDK version < 18. It is the calling app responsibility to make sure their key is right.