The point is not to protect apps that are overreaching, by intent or just sloppy permissions, but to reduce the chance of unexpected behaviour to the customer (

The point is not to protect apps that are overreaching, by intent or just sloppy permissions, but to reduce the chance of unexpected behaviour to the customer (or if you're tinfoil hat , "the product"). The implementation on the part of the developer may be tiny, but you still have to have give those companies time to make and test the changes. Look what happens when companies move the Send button or whatever on their UI-- I tidal wave of internet bile comes rolling in. An app developer might appreciate a heads up before deluging their inbox/tracker with complaints and 1 star reviews.