Something scary to also note in that permission is:

`it will be able to … trigger action buttons`

If you ever receive a second factor popup that says something like “was this you? YES/NO”, an app with that permission can respond to it