Apple should really stop allowing abuse of their APIs, from custom photo pickers that nobody needs (remember, if your app uses the default photo picker, it doesn't need any permission at all) to any app that decides to include a general-purpose cookie-less web view instead of just opening links in Safari.