GrapheneOS has storage scopes which make the app think it has full folder/file access but in reality you can choose the exact files or folders to give access. It helps keep invasive apps in line.