why are you so incredulous that android might have some annoying privacy restrictions that a custom AOSP can sidestep? I would google rabbit's reasoning for this but I don't care enough
I don't doubt that such restrictions exist. But I'm also curious as to what, specifically, they would be? Apps can access all sensors, cameras, microphone, network. So what's left?
There's a good number that might be useful for the R1.