How distributing an app that steals crypto for weeks is "prioritise their users"?