Xposed + Xprivacy = problem solved
(or privacyguard if you have a custom rom)
If you don't have root, you don't own your device, someone else does.
(just wish the xprivacy ui was as easy as old CyanogenMod was, simply strike through the privilege to revoke)