As far as I know.
Currently, only the SDKs in the blacklist are objects that must be added to the privacy list.
In addition, if the privacy and security API is called within the app, it must be declared.
It is still unclear how Apple conducts automatic review and judgment internally.