If you choose to implement a scriptable APK:
Many modded game clients use scriptable APKs. The core game logic remains native (for speed), but mods are written in Lua. This allows modders to change game behavior without reverse-engineering ARM assembly. scriptable apk
Security researchers use scriptable APKs to instrument running apps. Tools like Frida (which injects a JavaScript engine) allow you to intercept API calls, bypass SSL pinning, and dump encryption keys on the fly. A scriptable APK used offensively becomes a RAT (Remote Access Tool) if not secured. Detailed Report: Scriptable APKs 6