Wow, I thought it was an official app. Now I wonder what telemetry or even conversation data I have just sent offsite.

As others have said, this is a giant red flag.