This sounds like you're implying that all apps must require invasive permissions which is wholly incorrect.