Some head units (working with a 1st party one atm) have two networks: OEM-paid (unlimited data) and user-paid. A 3rd party apk would be consuming all bought traffic quite soon.

Also typical Android permissions still apply. The user would need to grant the malicious app contacts, call logs, etc permissions.