This issue was addressed by enabling hardened runtime. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to bypass Privacy preferences.
https://support.apple.com/en-us/HT213535
https://support.apple.com/en-us/HT213532
https://support.apple.com/kb/HT213534
https://support.apple.com/en-us/HT213536
https://support.apple.com/en-us/HT213530
http://seclists.org/fulldisclosure/2022/Dec/27
http://seclists.org/fulldisclosure/2022/Dec/26