Anyone who knows android dev knows this is a non issue. The permission they request doesn't even do anything in lollipop and later.
Sounds more like a bad dev than anything malicious.
What's the saying? Never attribute to malice with what can be explained by stupidity?