has anyone dug into whether one sec is safe (private offline on device as it states)? it requires access to accessibility settings, which means that it could be reading all of you cryptocurrency apps, passwords as well as two-factor authentication