Even something as degoogled as DivestOS will override your permissions and sensor settings to make the dialer app work in all circumstances. So who knows what proprietary apps that many people need might exploit this possibility.
Like you say, unless you physically disconnect the hardware, you can never now.
I don't know what phone they're talking about, but PinePhone disables sensors via hardware kill switches, i.e. nothing on the phone can use the sensors because they're physically not connected anymore.
My phone has it.
And how can we be sure it's doing what it says? It's software, on most phones you don't control software that is running above apps layer.
Try rotating the screen or using the camera
That just proves that you can't use the sensors.
Apps can have denied permission from the system, but the operating system can toggle it back for itself or just lie to you.
The only defence agains manufacturer is having free software OS. And the only way against third-party malware are hardware switches.
Even something as degoogled as DivestOS will override your permissions and sensor settings to make the dialer app work in all circumstances. So who knows what proprietary apps that many people need might exploit this possibility.
Like you say, unless you physically disconnect the hardware, you can never now.
That's true, but you can always flash Lineage OS or just stock AOSP if there's a version for your device
It is a shame that my phone's bootloader is locked. It's a TracFone.
I don't know what phone they're talking about, but PinePhone disables sensors via hardware kill switches, i.e. nothing on the phone can use the sensors because they're physically not connected anymore.