So many people saying this as if it could never happen. What happens when an authoritarian government decides that their citizens should
access government services though their app which is only available by side loading? Which just happens to
use some exploits to break out of the sandbox.
Computers in 2008 did not have cameras and microphones which I carried with me everywhere I went, GPS tracking my location, my entire communications history, etc.
Combine these two and welcome to 1984.
(N.B. links are not direct examples. Of course football isn't a government service, but it demonstrates how they can encourage populations to install such apps without literally forcing them, just make their lives slightly more difficult if they don't. And yes Pegasus was a complex, expensive exploit, saved for "high value" targets - other exploits will be uncovered).