Well, this sounds like poor/broken communication to me. Why didn’t they cite another app that’s doing the same as them that has access to the API they want?

The idea that Android use to just let any app access any file on the system sounds like a nightmare. But I live in the modern security reality that is our world. And that reality is just going to continue to get worse and require more care. Not less.