I use CLI to build my Cordova app, and I have added the Media plugin.
\'cordova build\' automatically adds the android.permission.RECORD_AUDIO to my AndroidManifest.
To keep plugins from re-adding unnecessary permissions edit platforms/android/android.json.
Locate these lines and remove them:
{ "xml": "", "count": 1 }
Please note that this is a "dirty" solution. After adding/updating plugins, you'll probably have to repeat this.