An empty checkServerTrusted implementation or a HostnameVerifier that always returns true disables certificate validation and enables MITM.
Perform full certificate and hostname validation; use certificate pinning for sensitive connections.