[ebg13]

All of your examples are things initiated directly by the user. There's no reason that preserving user-initiated "paste" needs to mean letting an app take what it wants.

[perfectstorm]

it wasn't clear from OP. i suppose having a permission modal like Photos or Contacts will do.