I don't think that's quite correct. The app is very transparently designed to log everything you do and send it to the Chinese authorities. It also contains vulnerabilities that could allow other people to get access to the data as well. Being malicious is not the same thing as being competent.
Biting the hand that feeds IT
