GrapheneOS Network Permissions not being honored

[David-Prock]

Either Facebook is making use of an exploit or graphing OS has a security issue.
The reason I say security issue is when you deny network access to an app it should Not have network access and that is security related.

When I installed Facebook and Facebook Lite, The network permissions was removed and never logged into.

I only logged in to Facebook Messenger and when I'm not directly using it I remove its network access.

So I did a screen recording showing all three Facebook apps do not have network access and yet I can still receive messages on Facebook Messenger.

And even when I open the Facebook message, it still says waiting for network.

Here is a screen recording that has not been edited at all demonstrating the issue. I uploaded it to YouTube. Here is the link.

https://youtu.be/hHyZKYYzy8E?si=kS1FBUf6ft3hFE8B

If there is anything you want me to do or show, let me know and I will completely comply.

In fact, I just re-flashed Two days ago using the web installer because my previous installation was losing battery life extremely quickly. And after installing all of the applications I had previously installed, I gave none of them network permissions except for a small few that I need right away.
This time around my battery life is a lot better.
I haven't really changed much at all in settings.

[thestinger]

The Network permission disables direct access to the network via network sockets and indirect access with APIs requiring the INTERNET permission. It doesn't disable communication between apps. There's a planned feature called App Communication Scopes. Facebook app is not connecting to the internet but rather receiving push messages via FCM.

[David-Prock]

FCM, is there anything i can do with that.
And what is that.

[thestinger]

It's using sandboxed Google Play to receive push notifications. Google Play services doesn't require the INTERNET permission for receiving data through FCM. In order to have set up FCM, the app would have had to have been granted internet permission at some point to set it up with their server. It set up receiving pushed data via Firebase Cloud Messaging.