Graphene's scope feature basically lets you share a set of pictures/videos/directory whether it's empty or not and tells the app that it has full access. For snoopy apps just create an empty directory somewhere and set the scope to that and allow access if the app is persistent. More info: https://grapheneos.org/usage#storage-scopes.

On devices I use personally I haven't encountered such examples for years, because the first thing I do is substitute first-party apps with FOSS alternatives. My mom does however, and her Samsung's camera app for example, won't function unless you give it permission to scan for nearby devices; among others, which I can't fully remember. So the stock Android experience seems similar to what you're describing for iOS.