That's...so far from something I was worried about, as GrapheneOS user.

I guess it's nice they did the legwork to set nuanced permissions, according to actual use cases. It would be great if that could catch on.