> Depending on your threat model this might mean that you should avoid using Android altogether for anything sensitive, or employ other mitigations to prevent the leaks. We aim to partially mitigate these problems in our app, so make sure to keep the app up-to-date."
This statement clearly implies this is the reason that Android is currently not safe.
This is not said or implied anywhere in Mullvad literature. In fact, they say the opposite.
"A VPN isn’t the entire solution for privacy. Here’s the kind of monitoring it can’t protect you against."
From https://mullvad.net/en/vpn/what-is-vpn