This seems very plausible. Wouldn’t say I am ready but will be prepared to adapt when the time comes .

Doesn’t this require an addon ?

I have encountered issues with IA torrents in the past. My issue is explained here and may be related to what you are seeing:

https://github.com/qbittorrent/qBittorrent/issues/19747#issuecomment-1884145923

I manually copy it to Proton Drive and access it via android with KeepassDX

Do we know what the hacked version of the app actually did after installed? For example, did it send all opened files back to some server owned by the hackers?