Randomness doesn't make exploiting their completely lame idea of security legal. I would suggest you stop. Most likely, this won't be arbitrated in a court of law but rather at Apple which you won't even get a chance to make a defense.
My recommendation, apologize and kill the app at the appStore and ignore anything else they send you short of a lawsuit.