You didn’t rest anything, or added any new info. Coincidences at best.
Same here: QKSMS compromised?
Start at boot? Isn’t the app relaying messages/calls/notifications to the wearable device? It needs to be running to do that, right?
The autostart has a Setting, is that not working? then report the bug to the developer
Please provide the links to the source code, that pertain to spying and credit card fraud and etc: Freeyourgadget/Gadgetbridge: A free and cloudless replacement for your gadget vendors' closed source Android applications. See the list for supported devices. - Gadgetbridge - Codeberg.org