A passage in the FAQs mentions:
Examples of the global OS configuration available to apps are time zone, network country code and other similar global settings."
I read a blog entry of German security researcher Mike Kuketz, who is also using GrapheneOS on his personal smartphone, which lists some information that the PayPal app collected during his tests, but it isn't clear whether this specific device used was set up with GrapheneOS and which permissions were given to the app.
Is there a list of all the information that apps can read without being given specific permissions on GrapheneOS? Which of the information mentioned in the blog post could be relevant and which not?
Example problem: Someone using a VPN in a separate profile might have their privacy reduced if an app can read the global time zone or network country code. It could also simply block the usage of the app if it finds a mismatch between the location that it determined from the user's IP address and the global time zone and other settings.
Thank you.