It doesn't help that (on Android at least) the control of permissions is so granular. I understand the desire to give users very fine control over their privacy, but the end result is that updates present you with a loooong list of permissions changes, and we all know that the longer a list gets the more likely it becomes that the user's eyes will just glaze over and they'll reflexively hit OK.
This is exacerbated by the fact that all the permissions requests are presented in the same way -- same font, same size, same color -- despite the fact that not all permissions requests are created equal. If an app wants to be able to talk to the network, that's a minor privacy concern. If an app wants to be able to read my address book, say, or my emails or SMSes, those are major privacy concerns. Those are the ones you want the user paying attention to and thinking about. The way the requests are presented should reflect that.