> If you give everything fine-grained permissions, you'll have to be a software engineer to understand how to use the application

No, that fine grained permission can be intelligent & automated to protect the non-tech user. That's where Android needs to innovate. Going forward with giving blanket permissions to anything being the only way to install an app is a bad idea, even if it's a reputed company like Facebook. I don't want 10 different apps accessing my SMS just to enable easy 2FA. I also don't trust many reputed companies into doing what's best for my privacy & security.