TikTok has been known to exploit 0-days to evade the Android permissions system and escape OS sandboxing, especially on rooted and/or unlocked phones. This is one of the primary reasons it was banned from government-issued devices in the USA.