Out of curiosity, are you referring to rooted Android, or some variant that provides the user some protection from apps "knowing"? GrapheneOS seems to provide some of this (Storage Scopes, network permission, etc.) but not all.
Why, as a user, is that story (even without losing the camera) would any of that sound better than just having the app store require that apps follow some approval guidelines about what they are allowed to do with privileges and what they are allowed to do when denied privileges?
Unfortunately, you can't really have sideloading and an app review process. If sideloading is trivial/normalized for users then it'll be trivial/normalized for bad actors wanting to exploit those users.