I think we need more granular permissions, and built in ways to trick apps into thinking they have permissions they do not.