The permissions that apps can get on Android even by default are pretty invasive, like querying other apps/processes and etc iirc...