Except clipboard malware that can be used even to steal on cold wallets. Is there any other malware that can be used to steal on the wallet?
You can not know the BIP39 seed phrase or any private key on Android Electrum.
I have been using Android Electrum for a very long but don't have experience importing BIP39 seeds on Android so if the information ir right then I learned something new.
Apart from clipboard hijacker still there could be plenty of ways you can lose funds from android electrum, let's say if your device is installed with malware then it can possibly have complete access to your device and execute any commands as long as it's connected to the internet, so never assume that if wallet. doesn't store the seeds or privkeys then your funds are completely safe.