I read about this specific point and that by the time I restrict it, it would have already sent out my private info.

Not sure how true that is but that's why I avoided installing GBoard.