The interesting thing is that while we now think all required permissions are ridiculous, there used to be no permission system at all. None of the popular desktop operating systems offer any permission model beyond limiting a user's account (and I myself certainly want to have access to my own contacts - but do all applications?).

So it's a very good step that there is a permission model at all. Now it's time to refine it, iterate improvements, and make it the way it should be. Broad permissions like filesystem access merely to save or open a file (such as a document) could be removed altogether if there is a basic system component that lets the user pick the location themselves. Or access to the camera could be asked for by the OS every time an app requires it, or at least it could be logged and display a notification.