What utter nonsense. Do you give every user and process on your machine root access? After all, if you trust them, then why restrict them? And if you don't tru

What utter nonsense. Do you give every user and process on your machine root access? After all, if you trust them, then why restrict them? And if you don't trust them, why let them login / execute at all? In reality, trust can only ever be partial, and even honest actors can cause damage accidentally, or can be compromised by 3rd parties through no fault of their own. Permissions are how you overcome partial trust: You grant actors only those permissions to act in ways related to the task you want them to do. That way, if even if they are dishonest or compromised, the damage they can do is limited. This principle is the cornerstone of modern security. It's the only way that most systems can interact at all. It is isn't "apathetic" for apps or websites to restrict the permissions of ads. It's apathetic not to. It's the same apathy that causes users to click through warning screens and grant apps whatever permissions they want, even when a Sudoku game is requesting access to their microphone and camera.