As much as people on HN seem to hate to admit it, the average consumer does not care sufficiently (or have enough to hide) for the ability to do fine-grained permission control to be valuable to them, so it's a niche feature. Most apps from big vendors can be trusted; the maximum-harm case isn't the common case. On the plus side, in a couple years (when the average Android comes with M pre-installed), users will have the ability to do fine-grained control whether or not they care. That's an improvement.
1. Purchased the device at a major electronics reseller during a period of specific contingency whilst travelling.
2. Prefers strongly to avoid mail-order purchasing for numerous reasons, including the possibility of in-transit interceptions and undocumented third-party enhancements.
3. Couldn't find a Nexus device at said major retailer.
4. Isn't aware of Nexus devices which offer expandable storage. Device in question has 128 GB of MicroSD storage. Max possible Nexus is ~16-32 GB last I checked, with no expansion possible.
I've explored other options, including a CyanogenMod reflash, though that's less than straighforward.
So, unfortunately, the world involves numerous compromises. I treat the device as hostile though of some utility. I've pressed several other app vendors on permissions, and am batting somewhat above 0.500 for having those reversed.
I've also vented considerable spleen at Google over how it manages Android. Given my previous record with recommendations, I expect to be fully vindicated in about 3-4 years.
(Another gripe, this one about electronics generally: sorting out manufacturer's offerings is all but impossible ... so I don't bother. Apple actually does far better than most through simplicity, though I have other objections...)