How I managed to get around badly implemented certificate pinning for one particular app.
Using Tailscale in a VM to transparently mitmproxy connections from an iPhone
This is annoyingly painful and I keep on rediscovering it, so here's a quick reference.