Steps to reproduce:

Repro steps:
1. Create a new project and a new empty scene
2. Build an APK with Unity 6000.0.0b11 and XR Plugin Mgmt 4.4.1 installed
3. Run “aapt dump permissions <yourapkname.apk>”
4. Observe the presence of android.permission.READ_PHONE_STATE

APKs built with Unity 6 will not be submissible to the Meta Quest store with this permission present.

Additional steps:
5. Remove the XR Plugin Mgmt package and rebuild the APK
6. Observe the new APK no longer contains android.permission.READ_PHONE_STATE
7. Reinstall the XR Plugin Mgmt 4.4.1 package, re-open the project with Unity 2022.3.16 or newer, and rebuild the apk
8.Observe the new APK still does not contain android.permission.READ_PHONE_STATE

It appears the combination of both Unity 6000.0.0b11 and XR Plugin Mgmt 4.4.1 results in the prohibited permission being added to the built apk.

Actual results:

APK contains invalid permissions

Expected results:

Permissions should be correct

Reproducible with versions:

The first version with this changes is 2023.3.0b7 , maybe you could try and see if 2023.3.0b6 doesn't have the "targetSdkVersion < 4" issue.

Not reproducible with versions:

Versions prior to 2023.3.0b7. QA tried this with 0b6 and could not reproduce.

Tested on (OS): Windows, Mac

Regression?: Yes

Regression version: 2023.3.0b7 (ebadad6d577d)