[slow_donkey]

Yes but it's still possible to target a lower version of Android and request all the permissions up front which must users would agree to

[zamber]

That's exactly what the Mi Home (for Xiaomi IoT stuff) app does. Pesky little buggers.