I understand the security implications, but I think I should at least have a say about what happens on my own phone
The app in question is popular and open source. My SD card’s downloads folder is also unused and empty, as you can see. There is absolutely zero risk here