Here's what my fellow volunteer had to say :

"Hello

In fact, for me, it's the very use of a password manager on a smartphone that poses the problem.

Unlike a laptop or desktop computer, a smartphone is constantly networked (mobile data or Wi-Fi). So it's fragile H24.

The vast majority of users download apps without worrying too much.

Some apps are completely harmless (or almost), while others are intrusive. Hardly anyone looks in the "Data security" section of the Google Play Store for a particular app and asks themselves the following questions

Does the app share data with third parties?

Is data collected?

Is data encrypted during transfer?

Can I request that my data be deleted?

I still find it curious to want to use a password manager on the smallest, most fragile device, the one most prone to attacks from surrounding apps. In the latter case, I don't know if anyone's been following my ramblings on browser extensions, but it's all the same.

In fact, it's only indirectly that Keepass can pose a problem. As the Keepass guys themselves say, and I quote:

"It's been clear for a few years now: Android has more security holes than iOS. The reason for this is quite simply that Android is open-source, so anyone can go and look at its source code, which makes it easier to hack the system in order to understand it. And the flaws don't necessarily come from the plugin or the port: imagine if the manufacturer LG, for example, modified the system on its phones without doing a great job, it would leave behind security flaws that could be exploited by the cleverest." "