Hello there Hope, thanks for reaching out today!
It is not possible for spyware to infiltrate Prime. QuantumLink has a very limited set of capabilities and is secured by cryptographic keys for encryption and digital signatures in Envoy that Pegasus and other malware simple cannot access. Prime ignores all communication that is not properly encrypted and signed. In addition, Prime does not automatically sign transactions, so it’s impossible to send funds without user interaction on the device.