They don't appear in my app list so it's not intuitive how to disable permissions at the OS level like other apps. I've read about people using networking apps to block connection requests, but this seems like a high bar for the average user. It's so much easier to just install a keyboard that doesn't require sketchy permissions.
My keyboard needs two permissions: control vibration and run at startup. That's it.
I like graphene for this. Very easy to set permissions on apps. I don’t know how the default android experience is since I haven’t tried it in a long time
I haven't worked up the nerve to go all-in on graphene but it's on my radar.