There's nothing to stop a Facebook app being built like this. In fact, Facebook recommends this approach.
It's simply that many developers feel that it's easier to get all the permissions in one go, when the user first signs up.
It's simply that many developers feel that it's easier to get all the permissions in one go, when the user first signs up.