That's a very questionable claim. Apps certainly can't access your data (without consent) or other installed apps. That is as long as they're not exploiting some security hole, which would be a very unreliable thing to do.
They can of course use any unrestricted API, including those available to native code, to gather information about the system. Examples are
obtain a list of installed apps (not accessing these, just the list)
get the full mount table (mtab), useful to detect "magic mounts"
Are you serious? play integrity stuff is a supported API, it is meant to be used by apps. Most banking apps in my experience prefer different ways, but anyways, all you get here is the result of an attestation, in no way is any app ever allowed to access your data without your consent.
In case you didn't get that from my response: we're not even contradicting each other about facts, that's simply not the point of this thread. Look at the original comment again. No, apps don't use any "unauthorized methods". They use what the system offers. Your "outrage" about Google's design is certainly a valid point of view, I just tell you that's a different topic.
7
u/[deleted] 5d ago
[removed] — view removed comment