As a regular Android user, I'll say that Android's permission model is simply awful.

There's no way (in stock) to return blank data, so apps will simply shut down or silently malfunction if you refuse permissions.

The grouping of permissions lumps "can portscan your network" and "run hidden in the background when your phone boots" under "Other", which you can't disable.

J2ME had a more refined security model back in 2006.