I'm not blaming the brand or implying that they are the thieves... I'm questioning the fact that this wallet was installed on an Android device and it appears that it can be relatively easily rooted and flashed with all sorts of different/custom ROMs:
https://forum.xda-developers.com/mi-9t/development@OP, is your device rooted?