Not sure about Android, but at least on iOS, you aren't prompted to allow access to photos until the you attempt to use the feature in most cases, which is what

Not sure about Android, but at least on iOS, you aren't prompted to allow access to photos until the you attempt to use the feature in most cases, which is what Spotify are arguing for here. But you're right, once you've granted permission it's up to the app to be responsible. Makes me think the OS should provide a 'Just this once' button when being asked to allow access to extra permissions.