I statically analyzed my bank's Android APK (10M+ installs) and found 8 trackers, 80 hardcoded secrets, BioCatch behavioral biometrics, and a security .so with no stack canary — MobSF report inside