Can applications access users information without having ( camera , microphone or etc) permissions?

I recently became very suspicious of apps.  And a few questions have occupied my mind, please help me 1. Is there any way that an application can access the camera without having the camera permission in the settings? (Android 9 and above) 2. Can an app use intent to use the camera without the user's knowledge? (And take photos and videos of the user?)