Cybersecurity researchers have serious concerns about how the app was built.