DoidFS can use the camera to take photos and record video. It gets stored in the vault instead of your camera roll. This ensures that other apps never get access to the photo/video, even if they have "all-files access".

Several other apps does some version of this. If you have tried to export a photo from Signal to your camera roll, you have probably seen this before.

DroidFS does not ask for camera permission unless you try to use this feature. The app does not need the camera for anything else, so if you don't allow it to use the camera everything else still works.

Thanks for this. It is very helpful. To be honest, I had forgotten about Exodus.

I think it needs camera and microphone in case you want to take photos and video and save directly to an encryted volume. That is not in my use case so I will just deny those permissions.

Even competent programmers cannot look at an app in an afternoon and determine if it's safe, apart from the most glaringly obvious issues

Thanks. I had noted the lack of internet permission as a positive. I guess that I was just puzzled at the lack of coverage within the community. Maybe the app simply hasn't been around long enough to attract the attention it seems to warrant. Or maybe I am being overcautious.