I was extremely surprised that this happened.
I am using Relay for reddit android app to browse reddit using my GOS.
Due to reddit changes to the API the author of the app has created a secondary app called Relay Pro and the elder app is becoming non-usable.
Upon first launching Relay Pro the app was stuck on loading. To make it work, one had to enable native code debugging setting.
There is a small hint there saying "this feature slightly weakens the app sandbox" when toggled. slightly...
So once toggled native code debugging, the Relay Pro app loaded just fine. It asked me if I wanted to import all configuration and settings from the original Relay app. I pressed OK, and without any further prompts or permission asking the Relay Pro app had accessed the whole app data of the original Relay with all my settings,configurated itself to look identical to it with all my credentials, settings and subscriptions correct.
Is this what Native code debugging allows? That any app can access any other apps app data? If it does, then the word Slightly should really be changed and hint the opposite. Or is there a security issue somewhere?