The problem with coarse-grained control like AppOps is that it can cause apps to malfunction or even outright crash when they try to use permissions that you revoked. This is probably not the kind of behavior that Google would like to enable for the average user.
Personally, I'd prefer a subtler (but possibly more draconian) approach, such as exposing a fake or empty contact list to apps that want my contacts; exposing some random location in the middle of nowhere to apps that want my location; and exposing a fake or empty folder to apps that want my pictures. Grant access to my messages, but never actually notify them when a new message comes in. Grant access to my microphone, but only ever feed them silence. Poor apps will not even suspect that anything is amiss! Is there any way right now to do something like this on rooted phones?