We actually have this with the permissions API. The issue is everyone just opts for longer approval times and less intrusive UX with manifest level permissions.

We actually have this with the permissions API. The issue is everyone just opts for longer approval times and less intrusive UX with manifest level permissions. I agree though, runtime permissions should be the default