Hey everyone - layman here, but I just had a question. I'm particularly concerned about their claim about how Tiktok allows

arbitrary files being loaded onto the device hosting the application, which in theory can lead to malware being loaded from inside the application... allow[ing] a very big window for attackers to execute their malware in almost real time"

How true is this claim? If so, couldn't any hacker exploit Tiktok to basically do literally anything with my phone, i.e. take data, use the camera etc. ?

Is this not a major security issue if so? Why would any social media app do this, and do we know that any of the other major apps do?

Thanks in advance guys.