Thats probably true but you could enforce it at a corporate level with a whitelist of apps that should have access to certain permissions.