All the URI returned by system chooser can be read without any permissions?

[oOJohn6Oo]

In the module ActionOpenDocument, there's no PERMISSIONS declared in AndroidManifest.xml.

Does that mean we have the access to all URI returned by system chooser?
Like Intent.ACTION_PICK, Intent.ACTION_GET_CONTENT,Intent.ACTION_OPEN_DOCUMENT etc.

I can not find any official info about this.

What I've implemented is choose an image from gallery then set it to an ImageView.
Tested on several devices it works fine. (Pixel 3 Android 12, Samsung S8 Android 7, ...)
Only one Chinese Model(Android 8.1) crashed and reported SecurityException.