That's why our government warned samsung users for vulnerabilities. AR Zone, AR Doodle, etc. All AR apps from samsung are vulnerable. Samsung may fix it by releasing the updates...
It's for the third party Apps or hackers who can bypass. Here the question arises as Samsung and Google itself are not enforcing the permissions from user.
Check your permissions usage in Settings and select unhide system Apps, you will see.
As per your concern, we want to inform you that the app needs some permissions to process some data that are relatable to its functionality. If you found some apps that are using the unwanted permissions then share the screenshot of the issue on the Samsung Members Application (Open Samsung Members Application > Support> Tap on error report > Type your query > Send).
