I feel like this person doesn’t know how iOS works. Android users may have more control, but iOS users will be told up front when something is requesting their data (I believe this happens on android too?). For example, things like health data. Threads can not gain access to the Health app on iOS without the Health app popping up in threads and saying “Threads wants to access this data: Heart rate, weight, etc” and you can toggle things on and off. But Threads doesn’t do that. The stuff they put in their privacy policy doesn’t mean they are actually able to access parts of your phone unknowingly, it’s there because if you wrote any of your personal data on threads, Instagram, Facebook, or message anyone with that information, they are saying “hey, we reserve the right to tack that info onto your digital profile so we can serve you accurate ads and make us more money”.