Why does the api and the permission exist if there is no such thing as a legitimate use of it? Oh right, Google Maps and Gmail and who knows what else can have

Why does the api and the permission exist if there is no such thing as a legitimate use of it? Oh right, Google Maps and Gmail and who knows what else can have full access to those same contacts.