This sort of thing is why we sometimes need a platform regulator / "App Store".

Customers can't defend themselves against such intrusions of privacy from their school/government.

And employers too. They want you to respond to emails at all hours, and ask for way too much control over your device in exchange. This is slowly being changed with Android work profile and Apple "user enrollments", thankfully.