Replying to
@briankrebs@infosec.exchange oh come on, the subcontractor writing the app pulled in a generic cross platform push library which also supports HMS.
You're going for cheap ragebait here, you could easily check which lib they used that pulls in that dependency.