Improper authentication in InputManagerService prior to SMR Oct-2021 Release 1 allows monitoring the touch event.