[jsnell]

Yes, they do need to list the permissions that the app will use. But you're wrong about this being a list of permissions. See https://developer.apple.com/app-store/app-privacy-details/ for what this is.

The list of permissions is a different list, with different contents.