The same things happens with mobile apps requesting more permissions than they should/need. I'm even less optimistic about seeing a positive change there when

The same things happens with mobile apps requesting more permissions than they should/need. I'm even less optimistic about seeing a positive change there when it's embedded in many pages of a EULA. At least the operating systems are getting better at explaining permissions, but it's only as good as the user reading them and understanding what they're giving away.