What is 'over-privileged app' risk in mobile environments, and how does Google Play's Data Safety section help mitigate it at the distribution layer?

• A.Over-privileged apps can only exist on sideloaded APKs; apps installed via Google Play are automatically trimmed to the minimum permission set by the Play Store servers
• B.Over-privileged apps are automatically removed from Google Play by the App Defense Alliance; Data Safety is a marketing tool that has no security review component
• C.Google Play Data Safety section enforces permission minimization by scanning the APK and blocking apps that declare more than 5 dangerous permissions
• D.An over-privileged app requests more permissions than its features require, expanding the attack surface if the app is compromised or malicious; Google Play's Data Safety section requires developers to declare what data they collect, share, and for what purpose - enabling users to make informed consent decisions before installing