I trust the developer too, but the developer isn't the only person you must trust when you accept wide ambient permissions. You must also trust the entire suppl

I trust the developer too, but the developer isn't the only person you must trust when you accept wide ambient permissions. You must also trust the entire supply chain. I see it as good hygiene to remove wide ambient permissions.