Stuart H outlines the evolving work on the security of the new NHS COVID-19 app.