At that rate why not also ip ban any general purpose compute device from accessing their servers? I can't believe a major airline has programmers who think blocking jailbroken cellphones would do anything at all to thwart a hack. It makes me think twice about flying United certainly if these are the incompetent hands I'm placing my trust in.
Not that I agree with it, but the usual line of reasoning is that they have laxer rules on a native app. Like no captchas, much longer session timeouts, etc. So they aren't comfortable with the looser rules on a rooted phone.
Once again, things that are trivially bypassed by people who are active in this space, and their programmers should know better than using this line of reasoning that must just be ancient procedure at this point, especially considering the cargo they are tasked to ensure is safe.