It may ask for risky permissions like SMS access (to intercept verification codes), contacts, storage, and device data, raising privacy concerns.