Downloading "no key" scripts or executors from unverified sources can expose mobile devices to malware or credential theft.