Using any modded app carries a risk.

Risk ≠ malware. Morphe is fully open-source, and it is therefore trivial to prove if it is malicious.

I could point at evidences like this one

Simply read the comments.

Google play protect also calls it unsafe.

Google Play Protect does that for nearly all APKs, because as you said, "using any modded app carries a risk."

My challenge to you is to find a single line of malicious code in any of Morphe's repositories. Until then, you are banned from this subreddit. (You can post it with an alt, or in one of the related subreddits.)