I’m not sure exactly which permission is at fault but I think it’s probably the permission used for configuring wifi settings or maybe the one that allows us to enable/disable the wifi connection. We use those permissions during the controller setup process to connect to a wifi network the controller starts when it’s first powered on. If we didn’t request those permissions you would need to manually force the phone to connect to a network 3 or 4 times during the setup process.
On Android 4 the wifi settings permission does allow us to delete existing wifi connections but not to see the password. I think on Android 5+ the app is isolated and is only able to change wifi networks it configured so we’re limited to the one network we add for the setup process.
Anyhow in Android no app that isn’t part of the OS can request system permissions like the one to remotely wipe the device.