So it says it works on device with no network permission. But 10 barcodes per api call. ELI5: so this whole thing is permissionless and can work with GrapheneOS? Or requires something in googled-android?