> It seems so easy to take full control of phones these days.

What?

The lady agreed to install and run an app, because someone asked her to do so.

She literally handed over control of her phone with its bank account accesses, essentially.

Also, that's an Android phone, which might or might not matter, but i imagine this social engineering (as if) scam would work in general.

In the words of Laocoon, "quidquid id est, timeo danaos et dona ferentes" if i remember.