Does it make sense in a modern non-rooted android to keep banking applications on a separate device?

Question

Android

1. Not root
2. Of. the firmware is updated by the manufacturer with t.z. security patches
3. From applications: slack, skype, telegram, etc., i.e. large, no ads.

The question is, what can a third party app on a non-rooted android get from another app?
Is there a secure data store for an android app that other apps definitely don't have access to? Can a third-party app open a banking app, enter an access code and press buttons already in the banking app itself? About overlay, I am aware that it is possible to forward screen click events, and for individual buttons during development, specify that such touch events will not work on them.

PS I am not familiar with development for android.

Answer 1

Is there a secure data store for an android app that other apps definitely don't have access to?

Samsung has Knox and Secure Folder. People put something there, but I still haven't found the time to try it myself.

From applications: ... skype

Put some kind of firewall, for example, this one , and follow it closely. Maybe these are the jambs of Microsoft development under the supervision of Nadella, but both Skype and Skype Lite are extremely fond of constantly keeping themselves in memory and steadily sending something somewhere.
Moreover, even if you do not open Skype Lite at all (almost no one uses it), its monthly traffic can be, for example, 15 MB or more, despite the fact that there was not a single message.
It is unlikely that this is a direct leak of some banking information, but I do not exclude that he is spying be healthy.

Answer 2

Can a third-party app open a banking app, enter an access code and press buttons already in the banking app itself?

No, he can not.
Otherwise, it would be such a hole in Android that Google would go bankrupt on the courts

Answer 3

The only thing you need to be wary of is social engineering.
Let's say the malware pretends to be something else. You will lead and issue permission for some critical features (the same Accessibility).
Think before you give permission for something.

Answer 4

Has the meaning. A lot of questions to the application of the same Sberbank. Until he gets all the permissions, he refuses to work. There was somewhere infa that the user's photos are being analyzed, his contacts. In general, these banking applications are still trojans and should not be trusted.