> > Finding the company had accessed Android users' photographs and videos without obtaining their consent or informing them.

> I think it's clear consent was given at some point

That's not what was found. I don't know the facts of the case, but it's possible that "consent" mechanisms were found to be insufficient. As an example, if you ask for permission for one purpose, then use it for another, that would probably not meet the "inform users" bar.