The real scandal here to me isn’t what Meta did, it’s that *apps on Android can receive requests on localhost*.

Absolutely bonkers stuff. Android is a nightmare for privacy.

https://localmess.github.io