I have the h&m app installed on my phone and have it restricted from using background data and allow background use disabled.
Every time I log in to my profile I get a warning that the app is trying to perform DCL via memory, but I haven't opened the app yet.
This seems like a risky vector that apps can run on profile / system start up instead of when the app starts.