I don't use Google Messenger but I checked the permission. There were four and they all seemed reasonable: contacts, phone, sms, and storage. It's preinstalled and can't be deleted but it can be disabled. You can probably turn off some of the permissions but then, of course, it wouldn't work.
Have you considered getting rid of the security program? It's like the government in that at some point the security provided is outweighed by the problems caused.