Yeah, that seems like the right answer. However, I think you still have to hold developers responsible for clever tricks that violate the intent of the Android

Yeah, that seems like the right answer. However, I think you still have to hold developers responsible for clever tricks that violate the intent of the Android permissions system. There are always going to be loopholes. (This likewise means that there has to be room for developers to make honest mistakes.)