Instagram on Android was caught bypassing OS security requirements by opening a port on localhost, which webpages with Facebook tracking scripts would connect to to get your identity.
That said, I see your point. I wouldn't use Instagram if I couldn't do these things. If Google cracks down on user choice to a degree that even adb can't work around, then I'm out. Motorola's Graphene OS phone can't come soon enough.