Usually yes, compilers and standard libraries are pretty safe. But if you use something like Google’s MLKit in your project, it’ll inject INTERNET permissions into your app’s manifest at compile time (even if your app itself doesn’t need it), and will spy on you.