The obvious fix for that is to not allow extensions to ask for permissions during the install process, only at runtime.

No idea if that's included in Google's plans for Manifest v3, but I agree with you that it _should_ be done that way if at all possible.