Byku It is baffling that Android for all of its restrictive permission model allows just any random app to declare itself to autorun without asking the user first.
Several vendors (e.g. Xiaomi, OnePlus) offer a toggle to disable autostart of apps on boot, but indeed it is not native to AOSP, and Google and Motorola for example don't have it. You'd think GrapheneOS would offer this functionality, but it doesn't? (I have yet to install it.)