Why do you need accessibility / draw over / usage access permissions?

​​We need accessibility to monitor phone events to check for phishing attacks. It also allows us to alert you to take action when we detect any suspicious phishing activity.