I use the play store version of Simple Keyboard https://github.com/rkkr/simple-keyboard. It doesn't have swype, but for what it does have, it consistently just works; and it only has the vibrate permission, so it can't do very much (not even use the internet, which doesn't need a prompt, but does need a permission in the manifest)