CovPass App on Android is suspicious ?

I'm using Sophos Intercept X on Android mobile phone.

There is an government official app here in Germany named CovPass. It is used to store Covid-19 certificates

and show them on entrance to various locations. Without this app you will literally not be allowed to enter a grocery

store in near future. In Intercept X this CovPass App done be RKI (governmental for desease control) is shown

as suspicious.

Is this really intended? Do you have good reason to show this app with low reputation ? If so, literally millions

of people in Europe will have interest in your investigation results.

Please be informed that I will inform the publisher, RKI, also on this issue

Kind regards

Wolfgang Graf