So I downloaded an app from the web today, but it had some permissions I was uncomfortable with granting. So, I used APKTool to decompile the APK, removed the suspicious permission from the manifest, and recompiled + resigned the APK. Then, I downloaded the modified APK on my phone.
Does this approach work? My understanding is that now the app will crash if it tries to do something requiring that permission.
*PS: The reason I did this was because the permission to remove (CHANGE_WIFI_MULTICAST_STATE) did not show under settings/app Permissions of my phone. It only showed up under "All Permissions," where I couldn't simply disable it.