GOOGLE WILL NOW AUTOMATICALLY REVOKE PERMISSIONS FROM HARMFUL ANDROID APPS

Summary from the TLDR InfoSec newsletter

Google's Play Protect will now automatically revoke permissions from apps that it detects to be potentially malicious. Users will be able to re-enable the permissions but will need to acknowledge an additional warning. This is part of Google's push to increase Play Protect's capabilities along with capabilities to automatically block known malicious apps.