JSONP is a hack from the noughties, and should not be used anymore. It's inherently insecure and it doesn't even look like the app is using it