[hxsvui]

Is there any PoC, or end-to-end description supporting your claim that this is possible?

I'm quite sure WhatsApp uses transport security, too. You can't just MitM then.