> Well, actually, they want you to be able to set a photo as the cover of a playlist, and there is no difference between "Allow user to upload 1 photo" and "Have access to all of users photo" in terms of mobile permissions.

I think Notch's response is quite accurate: “But I do understand how easy it is to make up small features to require access to the entire phone so you can sell your customers.”

Two things can be true at the same time. Just because the public, published reason is innocuous doesn't mean there's not some MBA just waiting to get his hands on that data.