I don't know if there's been new stuff about it recently, but there's a good chance this is just sourced from a single reddit post that says they decompiled the app and found "loads of dodgy security problems just trust me"

I haven't found a source for this that doesn't trace back to this one reddit post.