I recall reading here that on Android, an app won't automatically update if the newer version needs additional permissions, so most devs ask for all they could

I recall reading here that on Android, an app won't automatically update if the newer version needs additional permissions, so most devs ask for all they could possibly need up front. Ideally, Google will bring back App Ops (with dummy data so that apps don't crash), and allow explanations in permission requests. Currently, iOs has per-app permission settings, and apps don't crash when you deny them access. This doesn't solve the problem of users just clicking "allow" blindly, but it does provide more fine-grained control.