For those things you can't control it doesn't ask. You can see those under "other permissions" (or similar). But once you look there it's too late if you care about this data and forgot to turn on airplane mode.

Yes. A few apps have been caught doing nefarious stuff using advertising sdks, like meta, but on android most apps are well sandboxed and can only access what you approve.