That is ... not funny.
I review security aspects of mobile wallets and the one biggest way of scamming people that without exception all wallets could do is to grow the user base and then push a malicious update that leaks the keys. My recommendation always was to switch off auto-update for any Bitcoin wallets but if the wallet provider can provoke to override this setting, nobody is save.
Guessing TestFlight updates were still on.
Why do you think mobile wallet is safe?
Nothing is safe in absolute terms.
I assumed a certain line of defense in not having auto-updates and wish Google never had switched the default from off to on. Learning that off is not off leaves the user with zero protection against exit scams even if aware of auto-updates. I wonder if OP was really getting updated from iTunes or from testflight.
Probably App Store, my TestFlight is not auto updated yet
