This app requires DAC_OVERRIDE, DAC_READ_SEARCH, SYS_PTRACE, SYS_ADMIN (for /data/local r/w) and SYS_CHROOT, SETGID (to run chroot and run it's processes) Devices with NetHunter installed is already considered compromised due to lack of security features(like SELinux), therefore users are advised not to store private data It's not really worth restricting more capabilities of the app.