This sounds a bit weird to me but: grapheneos updated last week, I am using a banking app that requires SMS privileges to read a verification code. The app never asks for such permission, just alert the user that it's not possible to automatically read SMS.
I have checked app permission manager and as far as i see i cannot grant "custom" permissions to an app if the app itself did not asked for. The profile doesn't have any G service installed, using the same app on a profile that runs G makes the app to request SMS permissions through gservices
Could be a sort of anti-tampering? Is it possible to grant such permission to an app that doesn't request it?
thanks