The problem is that apps need certain permissions to perform their function. Such as a music app that needs access to the phone module, so it can pause the music when a phone call arrives. This has the effect of users not paying attention the the specific permissions, since in many cases the need for them isn't obvious.