I believe this is something where Android can provide a better experience by not giving a blanket permission to read all SMS. How about only allow SMS with a pre-defined header to be read by an app.