people complain if the apps don't all have fine grained permissions. and then complain when they have to agree to stuff all the time. and then complain they got "hacked". damned if you do, damned if you don't.
The funny thing is that since people who are subject to security problems will allow them regardless, defeating the entire purpose of the measures.
Computer security is just a people problem; you can't solve it by child proofing stuff. Imagine a car that would prevent you going over the speed limit or ask permission every time you want to do so...
But in that case, that's just beyond stupid, there is no permission for you to act on. They could have a per-document setting or an app level setting to allow opening links in PDFs without requiring the user to agree EVERY SINGLE TIME. On a document that was generated on the computer reading it. It's just complete incompetence.