Yes, this happens. Even if you turn off all the syncing etc, they will shoot an update and all your settings will revert to default. This has happened with my father's phone a lot.
And even if you keep all these settings off, they are still scanning all photos to check for CSAM.
I highly recommend deGoogling your phone. If you cannot install a custom ROM, check out Universal Android Debloater. There are many sources for degoogling your life. Check out c/degoogle on Lemmy (I forgot the instance name, just search for it). ~~Or if you want we have small group on Signal for deGoogling related talks, DM me and I can share the link to join. (Signal does require a phone number to register, but since usernames are a thing your phone number will not be available publicly.)~~ That group link is disabled, but I can share other group links like Linux and FOSS, or other privacy related groups.