Maybe because Google and it's products have little respect for user privacy?
Have you thought about using Aurora Store? You can usually see a list of the permissions the app requires before you install.
That's incorrect. Querying installed apps has been severely restricted (and thus mostly useless) and also requires a special nuclear-scale permission since Android 11.
I am wondering what exploit HSBC is using because I really don't think they are using official APIs for this.
Why was querying installed apps ever allowed? Why is an exploit or permission available now?
Answer --- see the original post above.
I would close my bank account over this. That’s not saying much though because they literally pay you to open new bank accounts these days…