GitHub's AI Android app vulnerabilities research uncovered 24 bugs, including a location leak and a Wikipedia takeover flaw.