Same with sensors, camera and microphone. Core system services will always have the privilege to override your permissions.

Developer Options allow you to fully(?) disable these, but even then, your dialer app for example will have perfect access to your microphone.

Don't get me wrong, I'd rather have it be like that in case of an emergency, but it does make you think.