When an app asks for permissions, the OS should not only let you answer yes or no. Every category should have a "yes, but feed the app fake data" option.
Want my contacts for no reason? Have these generated fake ones! Wanna listen to my microphone? Here's random ambiance sounds! Location? I'm on a tiny 5x5m island!
Hell yeah! Put it all in your databases mfers!
Actively punishing services wins over boycotts any day. Didn't want that junk in the database? Don't ask for it!
You can do that with XPrivacyLua (+ LSPosed + Magisk) on Android.
It still works perfectly on Android 13, however sadly the developer recently stopped maintaining it.
It’s open source though, so hopefully an active fork will pop up soon.
https://github.com/M66B/XPrivacyLua