What is 'over-privileged app' risk in mobile environments, and how does Google Play's Data Safety section help mitigate it at the distribution layer?

• A.An over-privileged app requests more permissions than its features require, expanding the attack surface if the app is compromised or malicious; Google Play's Data Safety section requires developers to declare what data they collect, share, and for what purpose - enabling users to make informed consent decisions before installing
• B.The Data Safety section enforces permission minimization directly: Google scans the manifest at upload, and any app declaring more than five dangerous permissions is blocked from the catalogue until the developer trims the list; over-privilege is a distribution problem the store solves on the developer's behalf, with no user judgement involved at install time
• C.Over-privileged apps are pulled from the catalogue by the App Defense Alliance, and the Data Safety section is a marketing surface with no review attached; the mitigation is a takedown process that runs after publication