> I was able build an out-of-band protocol extension into my audio player app

I wonder how that works.

Easier than it sounds: the app runs a simple http server that serves cover art by track id. The track id is transferred via iOS's built in "Now Playing" metadata fields, which is then used by the device to construct a query and fetch the full resolution image.