[inopinatus]

Some folks (myself included) by default prefer to segment their trust by vendor, not by application, since it tends to be aligned anyway. For example, as per GP I'm fine with any Apple app having location access because by buying the phone I made an implicit decision to trust the company. In contrast, Facebook's stuff can fuck off into the black hole of mistrust they dug for themselves.

Finer granularity of trust (+ve or -ve) occurs only in exceptional cases.

As with so much in life (and in tech), the greatest process efficiency occurs when you standardise a common case and manage by exception.