I know that the average user isn't going to flash a new rom, but that's exactly the feel that I get from CyanogenMod: a polished additional experience over AOSP, that even the average user could use and enjoy.
Other custom rom, like AOKP, already include a more featureful permission manager. It gives all the control you'll ever need, but it's not as easy to use and it might cause some applications to crash. And the "advanced" user can always flash OpenPDroid over CyanogenMod, thanks to the auto-patcher it only takes few minutes.
Keep also in mind that this is designed pretty much for Facebook, the most hated application on Android.