they actually just rate whether the App permissions match the users expectations.