I'm not sure what the privacy advisor is trying to tell me. For example, it says Lastpass is a moderate risk due to the following:
Permission to connect to the Internet. This makes sense due to what the app is.
Permission to access your location. This one I don't get. I looked in the permissions for Lastpass, and it doesn't have that permission. The option is there, but it's off.
There are lots of these, Lastpass is just an example. I'm using a Pixel on Nougat.