My guess is that the Texting component adds the RECEIVE_SMS permission by default, no way to undo this with blocks.
As far as I know, the only way around this is to decompile your apk, edit the manifest file to remove the RECEIVE_SMS permission, then recompile the apk and re-sign it. You will need a program like Android Studio or apkTool to do this.
The RECEIVE_SMS permission is added if the ReceivingEnabled property of any Texting component is set to something other than Off, so you should double check that. If you've used extensions, any one of them could also add the RECEIVE_SMS permission as well. Attached is an example project that will not have the Android SEND/RECEIVE SMS permissions when compiled.
I believe that I checked every Texting component, and they were all set to OFF. Which makes sense, because I never changed that property for any component.
I might just be thinking too much here...
But, the only other thing I suspect is that I used the App Inventor 1 to App Inventor 2 conversion that you gracefully provided for us.
That doesn't fix my app. But, could I provide you with the . aia so you can check it out?
Is it possible you're using an older AAB from before you fixed the problem? Try updating the VersionCode / VersionName and uploading a new build to Google Play.
I guess I wouldn't past Google to be that dumb about substring matching that they are only looking for RECEIVE_SMS regardless of the qualified permission name. We probably should add a patch anyway that only adds those permissions if the GoogleVoiceEnabled flag is set.