I am fully aware of what vpn services to use and not. I am not using Express VPN, I am simply doing research for a master thesis, when I came across these results from Express VPN. If you have any ideas or corrections, please let me know why a VPN provider would need to have access to these permissions.
Screenshot is from Exodus service, which let's you view what exactly perimissions and trackers each app uses. You can check out the results and the tool for yourself here: https://reports.exodus-privacy.eu.org/en/reports/com.expressvpn.vpn/latest/
You don't want to scan secure QR codes through Google APIs. You can be at risk of Google stealing the contents.
Then use zxing API
But you'll need access to the camera then.
Doesn't it use IPC? So only separately installed barcode scanner needs camera.
Mate, you need to give access rights to someone. The camera won't open magically. The reality is that it's safer to do everything inside your app, especially when you advertise security.