iOS gets close to what you want. Apps have to ask for specific permission for specific reasons (location, background download, etc), otherwise it just get killed after a few minutes.

Security is always at odds with convenience. It's easy to require a pop up to ask for permission every time and have user getting so used to these pop ups that they just automatically tap "yes"