They have a hidden app with every permission enabled already and you can’t change that.
/looking at my GrapheneOS phone lovingly
This is why the first thing I do with a new phone is to unlock the bootloader and replace the OS with LineageOS. Google Play Services are not welcome on my hardware.
It would be easier and safer if more phones officially allowed re-locking the bootloader with our own keys.
You can see the permissions section is greyed out, and the app has default access to every sensor (including my microphone, call logs, body sensors, camera, and nearby devices) and data point available. You can’t revoke any of these. Location is allowed all the time and I can see that it accesses my location every couple of minutes.
Would something like NetGuard help?
