If I were to install a basic application, such as a calendar, on GrapheneOS, that typically collects unnecessary data, will it still have the capability to gather any data if I do not grant it any permissions? Are all applications sandboxed within GrapheneOS?