XRI adds 'android.permission.INTERNET'

[George]

Hi,
I am using the XR Interaction Toolkit and I am working on a Oculus Quest app AppLab release. My app does not need Internet Access. In order to pass the AppLab review, I must ensure the app does not require the Internet permission.
I found that the XR-Interaction-Toolkit adds Android permission of 'android.permission.INTERNET' automatically, which is an unexpected behavior. I tried both 1.0 pre 8 and 2.0 pre 7, both act the same way.

To reproduce this issue, simply create a Unity XR project, set the build target to Android, and check the Oculus as the plugin provider in the XR Plug-in Management, import XR-Interaction-Toolkit, build the sample scene of URP. After building the apk and inspect the permissions using aapt, it shows "uses-permission: name='android.permission.INTERNET'".
Then delete the XR-Interaction-Toolkit from the package manager, rebuild the apk, inspect the permission, you'll see that the Internet permission disappears. So it appears that XR-Interaction-Toolkit adds the Internet permission.

My questions are -

1. why does XR-Interaction-Toolkit enforces this permission?
2. Is there any way to remove this permission but retain the functionalities of the XRI?