As long as the application is made aware of the permissions and can prevent functioning when they get denied, that doesn't really help much. It's the choice between getting mugged or never leaving the house.

The ability to deny permissions without the app noticing or filling it with fake data doesn't exist on either system.

Not a single platform require permission from each individual contact in your adress book to access them and that is the real problem.

Yes, Windows.