Mobile SDK - Assurance package - add to the Prod app

I would leave it in production, yes. Otherwise you do not have insight into production issues that you might need to debug. And it’s effectively inert since a person would need to be in AEP Assurance (the UI) to actually launch a session. So I do not see any issue in having it in the production version of the app.

I agree, the Assurance module can for the most part be left in production, as it requires a valid session created in the UI to activate and collect data.

I would however confirm this matches the security guidelines, as I have run into security practices that do not allow such solutions to be run in production environments in the finance sector.