Absolutely, which is why I really appreciate the network permission on GrapheneOS. It makes me more comfortable to allow other permissions knowing no data can be exfiltrated.

It's wild to me that "internet access" is not revokable or even displayed in the Play Store in stock Android. It's such a huge security and privacy concern, even if most apps semi-legitimately need it.

Or, it would be wild, if it weren't fairly obvious that this is just Google protecting their mobile ad revenue.

Well, Google is the advertisement company.

>no data can be exfiltrated.

Well, that depends on the other apps you have installed. Unless things have changed in newer versions, apps with no networking can still do IPC, so any app can for example use Cronet to make network requests via Google Play Services, regardless of the toggle, as long as sandboxed Google Play Services has network permission.

Yep, nothing has changed yet. GOS project still has this in the road map, but as of now Inter Profile Sharing still works.

Agreed.

Network permissions could be used to avoid ads on Android. The horror!