Calling SDK's a loophole seems pretty strange. It's not like SDK's have any more permissions than you grant to the app or anything, there's no real loophole her

Calling SDK's a loophole seems pretty strange. It's not like SDK's have any more permissions than you grant to the app or anything, there's no real loophole here. Maybe this is surprising to very non-technical people, but if you are even somewhat technical it should be pretty obvious that companies are not going to re-implement everything from the ground up, they need to share code via libraries.