What is the 'Notification Listener Service' in Android, and what is the primary security risk of granting this permission to a third-party app?

• A.B. A Notification Listener Service only receives notifications from apps that share the same signing certificate as the listener
• B.A. BIND_NOTIFICATION_LISTENER_SERVICE allows the holder to read, dismiss, and interact with all notifications system-wide; a malicious app with this permission can intercept 2FA OTP codes sent via notification from banking and authenticator apps
• C.C. The Notification Listener Service permission is restricted to system apps; third-party apps cannot request it
• D.D. Notification listener services can only read notification titles, not the full body text where OTP codes appear