It sounds implausible that the app can bypass OS-level restrictions. According to the Ars article this is the original source of the allegations: https://grizz

It sounds implausible that the app can bypass OS-level restrictions. According to the Ars article this is the original source of the allegations: https://grizzlyreports.com/we-believe-pdd-is-a-dying-fraudulent-company-and-its-shopping-app-temu-is-cleverly-hidden-spyware-that-poses-an-urgent-security-threat-to-u-s-national-interests/ https://grizzlyreports.com/we-believe-pdd-is-a-dying-fraudul... Reading that report more closely, it appears that the app has many characteristics the analysts considered suspicious but there's no evidence that it can actually bypass OS-level restrictions. The report is from September 2023 so if there were actually Android bugs that allowed permissions bypass I would have expected more security reporting from Google or third parties by now.