We need this permission in order to pause music during incoming calls.
I'm ok with that. (Bugger, Android's security/privacy policy is a real mess.
)
In Android "read phone status and identity" comes as one permission which includes both incoming call notification and phone identity and cannot be split.
Could you specify what are the exact permissions needed for pausing the playback?
Are you familiar with XPrivacy (within the XPosed framework)? I'm looking into the permissions of apps using XPrivacy, blocking/randomising stuff which I believe are not needed for the functionality of an app. Interestingly, MCC and MNC
are accessed by VLC, on startup. Other permissions in the 'Phone' group are not. I guess android.intent.action.PHONE_STATE would be the thing to allow, as apparently VLC gets the info of an incoming call here. FYI, VLC still works as intended when I restrict access to MCC and MNC.