That approach has two problems. First is that access isn't fine-grained enough - you often have to grant access to far more than you intend. Second is that ther

That approach has two problems. First is that access isn't fine-grained enough - you often have to grant access to far more than you intend. Second is that there's no way to know why an app is asking for access, or to be certain what it's going to do with that access.