> users generally click yes I agree that's an issue but I would say it's a separate one. At least in Android these days you don't have to agree to everything u

> users generally click yes I agree that's an issue but I would say it's a separate one. At least in Android these days you don't have to agree to everything upfront (during installation) but you can choose the permissions you want to grant one by one later during runtime. E.g. when the app wants to access the camera, it asks you for access right there and then and you can also only give it one-time access. That's already been a big UX and security improvement and I'm sure this can be improved even further. > Like I give file system or drive access to some app so it can pick pictures. In past versions of Android yes. Nowadays, however, in order for the app to access select photos it no longer needs the general file system access permission. The file picker has become a system component, and by picking photos you grant the app access to the selected files and the selected files only. Of course if the app is, say, a photo gallery app, then it will probably still need access to your entire camera folder (or even the entire file system), not just individual files. In such cases, I at least will probably review the app a bit more carefully. > Do I know what else it does with that permission?! Just have to trust. That's always the case when you grant permissions to someone or something. At least, the more fine-grained your permission system is, the more control you have, and the easier it will be for you to build that trust. In my case I usually disable internet access[0] for apps by default, so that even if they need access to, say, my entire file system, they won't be able to send my files anywhere or do anything shady. Only for select apps that I've reviewed carefully I might also enable internet access. Either way, I hope we can agree that Android gives you a lot more control over what you allow your apps to do than Linux. In Linux I have to blindly trust all apps at once. It's all or nothing. [0]: I use GrapheneOS. In regular Android the internet permission is no longer exposed to the user, I think.