One issue is that the permissions are hard to understand.

The end user doesn’t know, like, what bus-xyz or a socket is and if this app needs it!

The permissions may also change over time. Like a PDF reader may not need a particular permission unless you open a link or play an audio.

The apps have to be shipped in restricted mode, and ask user-understandable permissions. Basically, like phones.