Not only that, Android apps want full access to contacts and SMS but at the same iOS apps don't require those permissions. So it was never really a matter of security. This is all security theater from bootlickers