The official release android port of KPA is safe and does not have malware/viruses.
Android/Xiaomi has had an update where any non appstore app, which requires access to all files is flagged as a trojan.
KPA requires access to files in order to create a savefile which pertains across versions, even if you uninstall the app.
Code is OPEN SOURCE and you can check it yourself.