

https://f-droid.org/packages/io.nandandesai.privacybreacher
It hasn’t been updated in five years. I’m not sure of the current state of things in Android, but apps used to be able to access all kinds of personal data with zero permissions: listing all installed apps, access to sensors/accelerometers, battery level, when charger/headphones were last plugged or unplugged.
This is true. Non-Google apps trying to read your screen had to convince users to enable Accessibility permission.