When does certificate pinning help companion app API security?

Certificate pinning can reduce MITM risk on hostile networks, but it makes certificate rotation, corporate inspection, and emergency recovery harder. Many industrial companion apps are safer with standard TLS plus short-lived tokens. If you pin, ship backup pins early and drill rotation with a staging gateway before expiry.