Not to channel the usual Hacker News acid at you but have you considered the optics of “we are using code that requests fairly broad permissions because we couldn’t be bothered to invest in doing a better job that didn’t have to do this”? I don’t see this explanation as being particularly comforting.