If you bypass the JoiPlay method and search for a direct APK on Mediafire, here is what security researchers have found inside those files:
: Some community members create pre-packaged versions (often hosted on sites like descargar pokemon reloaded para android mediaf%C4%B1re