Even worse, they only update if they don't need any additional permissions. Thus incentivizing developers to ask for more permissions up front.