It can't send "whatever it wants." The user has to grant access to various categories of personal data.
And whatever it sends can and would have been sniffed by now. It's incredible how much time people have to expend on way-more-obscure snooping than that.
It has your location and your phone number and flight logs. The later are systematically sent to the Civil Aviation Administration of China along with your phone number which is a unique ID in China. I am not talking about hypotheticals, I am talking about what's happening right now in 2025 in China and that will happen all around the world as governments tighten the grip.
And whatever it sends can and would have been sniffed by now. It's incredible how much time people have to expend on way-more-obscure snooping than that.