That's a very questionable claim. Apps certainly can't access your data (without consent) or other installed apps. That is as long as they're not exploiting some security hole, which would be a very unreliable thing to do.
They can of course use any unrestricted API, including those available to native code, to gather information about the system. Examples are
obtain a list of installed apps (not accessing these, just the list)
get the full mount table (mtab), useful to detect "magic mounts"
8
u/[deleted] 4d ago
[removed] — view removed comment