Tor Browser for Android does not protect master password screen with FLAG_SECURE
This issue got reported to us by nightwatch-cybersecurity at our HackerOne bug bounty program and subsequently filed at Mozilla's bug tracker (https://bugzilla.mozilla.org/show_bug.cgi?id=1491627).
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information