> Even offline-only apps might gain online capabilities. You need to read the changelogs nevertheless.

No, I only have to look at the permissions. That is much less work because they're not arbitrarily long like changelogs can be.

And Google Play flags new permissions with a green "New", so it's easy to spot.