I assumed the main purpose of the app was exfiltrating information because they said it only sent one single GET request, not enough to DDoS anything. They don'

I assumed the main purpose of the app was exfiltrating information because they said it only sent one single GET request, not enough to DDoS anything. They don't say that, though.