> Google Play receives absolutely no special access or privileges on GrapheneOS as opposed to bypassing the app sandbox and receiving a massive amount of highly privileged access.

It doesn't mention IMEI here, but hopefully READ_PRIVILEGED_PHONE_STATE is included in "privileged access."

▲ exceptione an hour ago | parent [-]

There is an AppStore app, I am not sure if this is the one we are talking about? <https://github.com/GrapheneOS/AppStore/blob/main/app/src/mai...>

That one lists:

  ACCESS_NETWORK_STATE
  ENFORCE_UPDATE_OWNERSHIP
  FOREGROUND_SERVICE
  FOREGROUND_SERVICE_SPECIAL_USE
  INSTALL_PACKAGES
  INTERNET
  POST_NOTIFICATIONS
  QUERY_ALL_PACKAGES
  RECEIVE_BOOT_COMPLETED
  REQUEST_DELETE_PACKAGES
  REQUEST_INSTALL_PACKAGES
  UPDATE_PACKAGES_WITHOUT_USER_ACTION

▲

gruez 41 minutes ago | parent [-]

That's grapheneos's own app, separate from the play store or play services.

	▲	exceptione 24 minutes ago \| parent [-]
		True. I think this one is closer to the truth: <https://github.com/GrapheneOS/platform_packages_apps_GmsComp...> There is no READ_PRIVILEGED_PHONE_STATE mentioned there.