I do not feel you addressed my point at all.

I want to install an app now, and protect against its developer doing a rugpull on my local files later. I do not want to need to review each new app version in advance as I install it.

This is clearly a legitimate case where what the Android security model says I should be permitted to do makes me less secure against an attack by the app developer.