Read with very high levels of suspicion: there’s a huge number of errors in this article.

The issues discussed seem surface-level troublesome to me. But they’re extremely weasel-words and/or exaggerated. I don’t think these guys have found a smoking gun, there’s a lot of problems with this code but…

1. The permission list doesn’t seem to match reality. The argument seems to be “TEMU code references these permissions, so they must try to get the permissions somehow”. These red-flag permissions aren’t on the Google Play store manifest however.

2. Very basic errors involving MAC Addresses and other fundamental computer concepts.

Etc. etc. The core problems here might be true, but I’ll need a more legitimate tech-site to go over the data and actually tell me what the problem is, because a lot of this “article” is just hyperbolic fluff.