Interesting paper. I didn't fully read it yet, but according to the figures :

- Samsung looks worst than any other vendors (incl. Huawei) about permissions granted to pre-installed apps

- Apps probably set many hidden cookies and identifiers in logs, possibly share information with other apps and bypassing permissions ?

Quick note :

- figure 1 is not much readable

- figure 3 looks broken or misaligned