I think it should assume its hostile since physical harm could be done in the case of someone hijacking the app. The users phone could be stolen, or the device

I think it should assume its hostile since physical harm could be done in the case of someone hijacking the app. The users phone could be stolen, or the device compromised, or many other things. A compromised device should not be able to cause physical harm to a human! edit: someone else already said basically the same thing but I didn't see it because I opened this tab a long time ago and didn't refresh it!