Fair enough, it does make sense that they will maximise their profits where they can, I'm just saying that it (the app not the website) refuses to work unless you provide it a full scope of literally every permission available. Maybe it has more to do with attestation, and verifying that you are not a scammer, than stealing and selling data?