At least coinbase claims they keys remain on your device:

https://help.coinbase.com/en/wallet/getting-started/what-s-t...

Do you have reason to believe this is not the case? Or are you more concerned about a malicious update to the app?