Certificates still get rejected

[tercerapersona]

1. Run aup list-packages to find the package I want to patch.
2. Run aup get-apks app to drop all apks (base + split_config ones) into app folder.
3. Run aup all app/* to install them inside the phone, it works perfectly.

I open the app and I see a popup telling me that the app is debuggable, and a long list of libraries couldn't be aligned with 16kb page size.

When running mitmproxy (using --mode wireguard), enabling wireguard on Android, and using the app I can see a few DNS queries in the flow list, but in Events view I see all requests fail due to its certs being rejected, not trusted.

What could be the issue? Running Android 16.

*Tested with multiple apps, that I'm sure they haven't manually taken the job to pin certs.