Auto-updating without asking if the user is okay with the new permissions? How should this work?
The iOS implementation allows rejection of individual permissions, doesnt prevent install, and allows the developer the freedom to choose the best possible time to ask. See https://medium.com/p/96fa4eb54f2c
If Android had a better permissions model, you could allow autoupdates with new permissions disabled unless the user then chooses to enable them. That said, anyone who is serious about security has autoupdates off anyway.