With EAS Build, config plugins for any of your dependencies could add permissions needed by those dependencies. Ideally the config plugin would allow you to specify whether or not you actually want to use the camera (for example) it’s optional. Currently there are some things that should be configurable, but are not yet. e.g. expo-image-picker currently adds Android CAMERA permissions unconditionally.
I think you should probably create an issue on GitHub (if there isn’t one already) with the details from your post here and in addition any dependencies you’re using.
See also @notbrent’s answer about a similar issue here.
If you want to work around this before it’s fixed by the Expo team you should be able to use patch-package to patch the config plugin.