Shouldn't the user get to decide whether an app gets access to the contacts API? I should not have to trust that apple is right in saying whether I want an app to have that access.
Microsoft went down that path with Windows Vista, users want very high level permissions, which thus end up being all or nothing.
App stores on the other hand can actually differentiate between an app that only accesses contacts locally, and one that uploads that information etc. That’s not to say Apple actually does this diligently, but it’s at least possible.
Really it’s a question of deceptive apps. Suppose someone makes a AI based photo manipulation app which reasonably asks for permissions to your photos. And then quietly does a facial recognition search or just tried to find and uploaded nude photos without notifying users. You can catch that crap with human reviewers not so much permissions and automated systems.
App stores on the other hand can actually differentiate between an app that only accesses contacts locally, and one that uploads that information etc. That’s not to say Apple actually does this diligently, but it’s at least possible.
Really it’s a question of deceptive apps. Suppose someone makes a AI based photo manipulation app which reasonably asks for permissions to your photos. And then quietly does a facial recognition search or just tried to find and uploaded nude photos without notifying users. You can catch that crap with human reviewers not so much permissions and automated systems.