However I believe good package formats and OS-level checks can get us there without compromising my private informations to a third party in the process.
The "third party" I'm more concerned about is the random app developer. iOS prevents random developers from having access to files, the camera, the microphone, my music library, my location, contacts, my browsing history,using cellular data, draining my battery by processing in the background, etc. without me giving explicit permission.
Even ad blockers on iOS don't have access to my browsing history and you can disable third party keyboards from having network access.
Furthermore, you may not allow such an app to access your privacy, but Apple itself is above the permission and will happily gather all kinds of data about you, with your implied consent (after all you DID buy a tapped piece of hardware). That's Siri and every remote Apple service for starters, and god knows what else in their closed source shiny software.
The random developer is the least of my concerns.
Now a truly open model where people can enforce torch apps cannot ask for ridiculous permissions, that's better. Enforced by enough parties that nobody can pull the blanket.