Here’s a lesson about why it’s important to keep key material offline.
Kaspersky reports that “ComeCome”, a Chinese food delivery app, is the first known iOS App infected with OCR malware, scanning your Photos archive for wallet private keys / seed phrases.
Incredibly it’s still available on both iOS and Android. Be aware!