If the mobile app makes 7.5 billion revenue or has 45m monthly active users, then the company should definitely do their risk assessment. That's the exception though and doesn't affect many mobile phone apps.

https://digital-markets-act.ec.europa.eu/commission-designat...

https://en.wikipedia.org/wiki/Digital_Markets_Act#Criteria_d...