Granting a random app access to all your private data after they request access is very different than "There is nothing that actually prevents an installed app

Granting a random app access to all your private data after they request access is very different than "There is nothing that actually prevents an installed app from collecting all your data."