Major Privacy Loophole: Realme's "File Dock" bypasses view-once and ephemeral media protections on Instagram

Hey everyone,

I recently stumbled upon a pretty glaring privacy/security oversight on Realme devices involving the File Dock feature, and I wanted to see if anyone else has noticed this.

What happens:

While viewing a "view-once" (ephemeral) image on apps like WhatsApp or Instagram, if you accidentally or intentionally press and hold down on the image, you can drag and drop it directly into the system's File Dock panel on the side of the screen.

Instead of capturing a temporary block or failing due to screen security flags, the system overlay intercepts the rendered image data and lets you drop it as a permanent, raw copy into the dock. From there, you can paste or move it anywhere outside the app, completely defeating the purpose of view-once media.

Why this is an issue:

System-level multitasking features like File Dock or Smart Sidebar seem to sit at a compositor layer that captures screen elements before the app's internal security flags (FLAG_SECURE) and deletion timers can wipe them.

Device tested: Realme P4 (Realme UI)

Status: The copied asset persists indefinitely in the dock until manually deleted.

Has anyone else experienced this on Realme UI, or similar sidebars on Oppo/OnePlus (ColorOS/OxygenOS) devices? Thought it was worth bringing to light so people are aware of how system overlays interact with app-level privacy protections

https://redd.it/1x60wx0
@reddit_android