- location (only accessible via permissions dialog)
- existing photos and videos (only accessible via apple-provided picker dialog)
- reading email or SMS (never accessible)
- sending email or SMS (only accessible via apple-provided compose dialog)
- any data or settings for other apps (never accessible)
- push notifications (only allowed after permissions dialog)
- Safari history, cache, cookies, etc (never accessible)
In fact, the only thing apps can access without permission that's really problematic are the contacts. And yes, I expect Apple will be closing this very soon.You could maybe argue that accessing the live camera and microphone feed are an issue?