Pretty much, though the problem isn't that the permissions weren't granular - reading the call log has been its own permission since Android 4.1, and apps targe

Pretty much, though the problem isn't that the permissions weren't granular - reading the call log has been its own permission since Android 4.1, and apps targetting that version have to request it separately even if they support older versions - but that there simply wasn't any way for users to grant only some permissions. So Facebook had to request all the permissions they might want to use from every single user, regardless of whether those users ever opted into the features that required them. The first official version of Android that allowed users to turn individual permissions off was Marshmallow, released in October 2015 with the first beta in May 2015 - the email in question is dated the start of February 2015 and says they planned to ship it by the end of the month.