It's not very bad on Android. The framework really pushes for a kind of plug-in like architecture where you abstract your core components into things like Servi

It's not very bad on Android. The framework really pushes for a kind of plug-in like architecture where you abstract your core components into things like Services, so thinking about those core features up front goes a long way to creating a common point to handle permission checks. If all else fails, an app could simply extend Application and check permissions at runtime.