Good callout. I'd recommend this as a first step when downloading apps through Aurora.

I understand the worry and depending on your threat model this could be an issue. But looking through the code I don't see anything personal being sent over to the exodus servers. If you're worried about sending data that could identify you, I don't see this app being a problem.

But OpSec is personal and multi layered so another less invasive option is to directly use the exodus website to look up any apps you have questions on https://reports.exodus-privacy.eu.org/en/