That doesn't make sense. I'm not a dev but I'm an experienced techie & a EE. I looked at the permissions in Settings > Apps and made sure to show all permissions. So for ES 3.2 I can tell you for certain what the permissions are.
But, if I understand you correctly(?), you are saying apps written with the latest Android SDK grant apps all permissions to use the phone?
You made me suspicious when you wrote And the tool you use to check permission is old, and doesn't tell you about the case. - WTF??? Can you tell me what tool do you think I used to check permissions? I never told you I used a tool to check permissions. What tool do you think I used to check permissions and why are so so sure it is "old"? And what "case" are you referring to?
You're wrong. Please check my posts, Not the apps written with latest SDK grant all permissions, But the apps written with the OLD SDK grant all permissions, like ES 3.2 you're using. It's developed 5 years ago, and it used very old Android SDK, so on Android 6, the system won't prompt any permission and just allow them, it's for compatibility for old apps, but this version cannot be on Google Play any more due to Google Play requires Android 9.0 SDK.
If the app uses new SDK, every important permission MUST ask for your content on use, just like FV. FV uses Android 9 SDK, which can run on any Android new versions and can be published on Google Play.
If you need more info, you might refer to the Android official documents here, the running permission part.
https://developer.android.com/about/versions/marshmallow/android-6.0-changes
There're also some permissions changes on Android 7.0-10.
FYI, ES 3.2.3.1 requires the following permissions:
https://appchive.net/apk/com.estrongs.android.pop/es-file-explorer/221
If it doesn't use the permission, you can hardly use the most of the features.