I live in Canada. My girlfriend is Chinese (also living in Canada), and while we are able to communicate via SMS, her mobile carrier isn't the best, and so there have often been issues for us with regular texting. She expressed a strong preference to use WeChat, at least as a backup option for when texting fails us. While I have some pretty significant reservations, it's not the hill I want to die on. So my question is: what can be done to use WeChat without compromising my whole phone? I'm okay with it if our conversations aren't private, but I'd like to know that I'm not giving unfettered access to all of my phone's systems and data to the CCP. What can be done to limit the reach of this ubiquitous app on my device?
You can put it in a work profile and trust that Android is protective enough to keep your data safe and access limited. Otherwise buy a second phone just to put WeChat on it. Don't know how WeChat works, but if it's like Whatsapp then you don't need to bother with a secondary number.
Indeed. The front ends could be less or more "secure"/private. And by that I mean that I don't know how the app themselves are with access and your data. So I don't know if they collect and share any data and how reliable the developers are.
Both are open-source and there's a fork of Island on F-Droid called Insular. These shouldn't collect any data, in fact, they can't include any proprietary tracking SDKs because these aren't allowed on F-Droid.