Downloads are inherently risky to our devices and should be avoided as often as possible. If in doubt, don’t do any download. Especially downloads related to crypto are often a target for hackers and malicious attacks.
Downloads should be done from reputable sites and not from every link you see, when downloading a software, check out for the accurate logo and spelling. For example in playstore there's "Bitget" and "Bitget wallet". Where Bitget is the original exchange software and the latter is a scam software.
I stumbled on one of these crypto farming projects asking subscribers in it's tasks to download "Bitget Software" and even provided a link to playstore and following the link I saw that it's a scam version of Bitget exchange.
Same things with KuCoin, there's "kuCoin", note the spelling difference. They try a lot to imitate reputable products and lure less suspecting individuals to patronizing them, leading to great funds loss.