[itsacomment]

See, my first question would be "WHY?!".

Every unnecessary permission is suspicious until proven not to be, and will at the very least be used in ways that I would not, if not even actively to my detriment.

Your android flashlight demanding to read your contacts is trying to scam you ( and worse, your contacts through your negligence), not just ask for some harmless permission you needn't care about.

[anon84873628]

Hence why the Google Play store reviews app permissions requests, just like Google OAuth app registration does, and just like GitHub could do...