To make the biggest “no fuck no” is : to install it you’d have to enable installation from unknown sources. Which is almost a guarantee you’ll get fucked in the future. Even if you install the good apk this time. Now taking control of your device is (on some older versions of Android) as simple as sending a text.