The Xiaomis are kind of interesting in that if you buy a legitimate one direct from the official store it's likely to be in Chinese but also somewhat-clean (for a questionable definition of clean - expect bullshit battery saver / storage cleaner apps that to me would border on malware).

If you have the misfortune to buy through a reseller (gearbest, dx, unofficial stores, amazon, etc) out of several phones I've purchased from resellers, they have all come with malware on them.

This may partially be why Xiaomi is enforcing up to 180 day minimums before they allow a bootloader unlock (to prevent flashing/sideloading system malware apps) by shitty resellers for $ before they ship. It does piss me off once I get the device that I have to go sign up on their forum and beg for a "possible approval" for a bootloader unlock.