The issue was addressed with improved permissions logic. This issue is fixed in watchOS 8, macOS Big Sur 11.6, iOS 15 and iPadOS 15. A malicious application may be able to bypass Privacy preferences.
https://support.apple.com/en-us/HT212819
https://support.apple.com/en-us/HT212814