For what it's worth, grapheneos allows you to control this permission.

Why would the Belgian post hack your phone?!? Of all the things to be suspicious of, that one's low on my list.

Yeah agreed. The Toast notification is terrible UX. Thanks for letting me know an app already read my address/CC number/privatemessage/image.