"Display over other apps" permission

lemonadehabitat

I remember reading that this permission is risky because apps with this may trick you into manipulating other apps or the system. I thought I read it from GrapheneOS's webpage or reddit, but I cannot find it anywhere now.

Is this still a concern with Android 13? If it still is, does Auditor tell me which apps have this enabled?

userxyz

Is this not a common feature of the Password Apps when they perform Autofill in order to facilitate the Login into an App?

lemonadehabitat

userxyz Not really, I'm using KeepassDX and it does not require that permission.
Regardless, a password app is trusted, but not necessarily for other apps that request this permission.