Do what it’s in this tutorial, and change var manifestfile to string manifestfile.
If you have permissions that you removed in UPL still appear in AndroidManifest.XML your UPL gets merged with another UPL from a plugin most likely or unreal source code.
Search from where that permission is getting added, you need to search every UPL file and rebuild the plugin with your changes or unreal from source.
I don’t think it’s from the engine’s code it’s 99% from a plugin.