Right now the app has enabled clear text traffic for all endpoints. Since we only need the clear text traffic for local communication we should disable clear text traffic per default and just opt-out of this setting by adding a specific network configuration for urls that are local if possible.
https://developer.android.com/privacy-and-security/security-config#CleartextTrafficPermitted