This. On privacy and even moreso on security, Android can be very good or it can be terrible and the first, and perhaps most important, determinant of this is your choice of brand.
Privacy is terrible on all stock Android phones, even first party from Google.
All ship with piles of binary blobs mandated by Google, SoC vendors, and carriers that have god access to your device, as well as any entities they sell that access to, and this sort of power abuse has been caught publicly many times.
Apple has been caught doing similar in the past but it is much harder to regularly audit closed platforms.
Unless you run something best effort like CalyxOS or GrapheneOS you should not have any reasonable expectation of privacy on a handset.