Sounds like a reasonable config for me too. Operations that will definitely leak your identity to everywhere (camera, gps) should never being prompt by random p

Sounds like a reasonable config for me too. Operations that will definitely leak your identity to everywhere (camera, gps) should never being prompt by random people actively (Who the heck will want to allow that?) unless you click the option yourself first.