its not really that simple, even on iOS. I'd like to allow facebook to access the camera so I can take a picture to send to someone directly from the app. But that means I've given it permission to access the camera period at that point. Not just permission to take a single picture. Similarly I'd like to give an app permissions to save pictures to the os level photo db. But the permission isn't 'save' it's 'access your photos'. Which means once I give it permission it can look at all the photos on the camera.

I'd personally prefer more fine grained permissions. Permission to take a picture (and read just those pictures the app took), permission to save pictures to the OS picture db. Permission to read pictures from the os picture DB the app didn't take.

I actually don't know if that would be any kind of solution. Another would be if the only way to access pictures was an OS level ui. That way the app couldn't access the pictures directly.

at the same time that would limit useful things apps can do. For example the fb messenger app showing half the display as a live feed from the camera.