Used to be that only the consumer was exploited this way. Manually turn off notifications and permissions in an app, only to have them turned back on after an app update. This is why I block app updates across the board. My bank app will tell me when i need to update to continue using it, and that's good enough for me. Most app updates tend to make the experience worse these days.