[jstanley]

Or, better, the software should serve the users (and not the other way around) and then you don't have to care what permissions it has.

You don't need to tolerate software that you have an adversarial relationship with.

[kadoban]

Since there's very little way to verify that, permissions are a better metric. This was especially true before Google basically neutered permissions.