How does an Android 8.0 app read SMS?

Question

Android

I installed an application called My Vodafone (personal account, to control expenses, etc.). There came an SMS with an activation code, which was automatically filled in the application for confirmation (authentication). What right does the app have to read SMS messages without asking. This is some real arbitrariness. He did not give him any special permission. Permissions is set to No Permissions. The question is how the app did it. It turns out that any installed application can read all sms?

Answer 1

It's not an app, it's Android itself.
On iOS as well, now Android, according to tradition, has been licked.