Used Coinomi in the past for some altcoin storage and never had any issues with them personally, probably they have bugs but, Do they really have vulnerabilities?
Coinomi had a really severe vulnerability where they sent the mnemonic code to the google server to check the spelling of the words.
While mistakes can happen, the developer claimed that this isn't as sever since google employees stealing funds would be unlikely. They completely ignored any other attack surface coming from that vulnerability.
The really important thing is not that the vulnerability existed, but the missing competence from the developer to acknowledge it. There are better wallets with more competent developers available.
Thanks for the clear explanation, I didn't know that this vulnerability existed with Coinomi but luckily I am not affected by it. Still have that wallet but I don't think any considerable amount left in there. Still the vulnerability exists with it or they resolved it?