This advice operates from a mindset that both privacy and security risks are binary. They are not+. A third-party app that gives access to X,Y, and Z permissio

This advice operates from a mindset that both privacy and security risks are binary. They are not+. A third-party app that gives access to X,Y, and Z permissions is a larger security risk than an equivalent app that only has permissions for X. So if an app only needs X in its current version but requests Y and Z, then it is introducing unnecessary risk. + See e.g. https://systemoverlord.com/blog/2014/09/05/security-not-a-binary-state/ https://systemoverlord.com/blog/2014/09/05/security-not-a-bi...