missing-root The default sensors permission seems to not cover the Pixel thermal sensor, which is odd.
My understanding is that the thermometer that some Pixel devices contain is handled specially -- I think it's because there's only one application that knows how to use it, and it needs a very specific kind of access?
missing-root Instead it will be installed as a system app by default, not needing a user facing toggle
Is it really installed as a system app? I don't have a device with that sensor, so I can't check.
If the situation is indeed that only the one app can access the Pixel temperature sensor, then it's not clear what would be gained by adding a toggle: users who don't want the app to access the sensor can just skip installing the app, and based on what I've read other apps don't have access to the sensor, so there isn't a way for other apps to have a toggle.
Is there a specific change you would like to see based on a specific need or potential threat?