There is a bug In iOS 14.0-14.8.1 where CoreTrust will allow any root certificate. since you need to be jailbroken Device first to place the app in the /Applications folder, this bug does not exist older than iOS 14.
Permanently sign IPAs on jailbroken iDevices 14.0-14.8.1
How Does it work?
