The TrollStore exploits a CoreTrust vulnerability that exists in iOS that bypasses signature verification to enable external app installations without the need for signatures, no expiration limits, and no flashbacks.