Google have decided that the app maker is best equipped to decide what access the app should be allowed. This makes perfect sense if you assume that your averag

Google have decided that the app maker is best equipped to decide what access the app should be allowed. This makes perfect sense if you assume that your average user will not install the app if it requests too much privilege. The reality is that most people don't check and install it anyway because they're given a binary choice. Would a better model be to allow the user to choose the allowed permissions? In some cases this would cause an app to fail, but as someone who firewalls outgoing IOS requests, this is unlikely. However, it still becomes a user interface issue. Any security system that requires the user to make knowledgeable security decisions in unfair and usually just a way to offer plausible deniability.