F-Droid

But really ask the dev about that

Do you really want an explanation?

Android permissions are confusing though, I already asked GrapheneOS devs to add more granular permissions but it turned out its not needed.

Internet permissions suck, but needed for remote SMB shares etc.

All the file access is of course because it is a filemanager, same as with "query all apps"

Foreground app and wakelock are to prevent Android killing stuff like Archive actions I guess, so it is necessary.