Most people don't know they're also being taken advantage of. I'm mostly referring to data exfiltration.

Which isn’t legal in Europe and the UK. Get better consumer protection laws.

On GrapheneOS you can install your bank app in a different user profile, and run Google Play sandboxed, so this scenario of a bank app doesn't result in anyone having access to your other information.