iOS has per-image access permissions, #GrapheneOS has storage scopes. Please use these features. You shouldn't be saving copies of your seed phrase like this too.

nostr:nevent1qqsrajuuughnu3gm6xk00wuex8dcp3wjnagnjd8udgstz8kkvc2qvgqpz4mhxue69uhkummnw3ezummcw3ezuer9wchsygplwuxkt5a8vj5utj6s8tsj8e3wcavc45p4mqmw92qs7wrh5azmyspsgqqqqqqscec36h

Reply to this note

Please Login to reply.

Discussion

But it is not clear to me which app is.. Is the Play Store with gallery access privileges? Or is it a malware app installed by the user?

It's the malware app. Typical Android malware like this asks for invasive permissions to then abuse them. Play Services doesn't provide apps permissions on their behalf.

Android 14+ also has per-image access permissions and now no new updates can be made to apps that requests full access to all images like in the past.