I learned quite recently that Android was using one user ID per installed app, effectively isolating them one from another. However, I am not sure I understood

I learned quite recently that Android was using one user ID per installed app, effectively isolating them one from another. However, I am not sure I understood what you meant by > On Android apps just request everything Well, this is as true as with any other operating system, isn't it? Nowadays, I try to use F-droid as much as I can, applications there ask for reasonable permissions, and are open source, which makes it easier to trust them.