I think it might be a good idea to pause updates on our Android devices, as horrible as it is for security just to prevent this from happening. My OEM has a lot of bloat (Facebook and other junk apps you can't uninstall, useless system services, etc) that mostly do nothing except provide some functionality I don't use along with analytics every minute so they are uninstalled.

"Disabling" an app does not do that much, the OS can re enable it with an update or prevent you from disabling it.

I doubt there is true full privacy on a phone anymore with a stock ROM.