my assessment team has found that the application that the appstudio cloud have compiled, does not opt out of the Android backup infrastructure. While this is not a vulnerability per se, it does leave the application open to backup
Is there way, somewhere, to set the allowBackup flag to "false" in the AndroidManifest file?
I'm developing in QTCreator
Yes, changes to AndroidManifest can be made if you choose to use LocalMake instead of CloudMake. Simply uncheck the Build app for selected targets option to create Project Files. This will give access to AndroidManifest file. I hope this helps.