It is spyware by design, but whether it's being used maliciously is still in question.
It does send encrypted traffic to China, though, and while that alone isn't proof of nefarious behavior (could be anonymous metadata/logs for development purposes), it's extremely suspicious