Have installed Aurora store on the website of FDroid. In settings on my device I permitted ‘storage’ only. After downloading my bank app I saw in the Aurora app not only the usual list of installed android apps, but also android icons of ‘settings’, ‘gallery’ and ‘files’ all ‘transformations’ from the Sailfish icons on my phone. So the app store has access to your pictures etc. without permission. I also saw that installation of apps in Aurora happens with a gmail account. They say it can be done anonymous. How does that work? For anonymous isn’t really anonymous in Google.
I have deleted Aurora and the apk, but will keep the bank app for a while.