It appears that for the German Wikipedia, several not-so-notable articles on musicians are regularly listed under "trending", yet it is quite obviously fake traffic: https://tools.wmflabs.org/pageviews/?project=de.wikipedia.org&platform=all-access&agent=user&range=latest-120&pages=Tobias_Sammet|Avantasia|Edguy
Could this be a bad actor intentionally getting exposure through the app?
I see there is already some filtering logic in the apps; maybe it's excluding pages that had no edits during that time period (which is generally a safe assumption unless the page is protected)? In this case the false traffic was consistently to desktop and mobile-web. Mobile-app seems to be the only one showing genuine traffic, and the spike there is probably because visitors got to the articles from the "trending" card in the app: https://tools.wmflabs.org/pageviews/?project=de.wikipedia.org&platform=mobile-app&agent=user&start=2019-06-23&end=2019-10-21&pages=Tobias_Sammet%7CAvantasia|Edguy
I was told there was a promising solution for T123442: Pageview API: Better filtering of bot traffic on top enpoints, but I'm not sure if Analytics is working on it right now.