(I'm sorry for my bad English, I'm German)
How to reproduce this security bug.
Step 1: Take a normal Android smartphone (maybe it also works on iOS, but I have not tested it yet).
Step 2: Install the official nextcloud-client.
Step 3: Set up nextcloud: Open the nextcloud app, tap on "Skip", enter …