Android would actually leave you in a much better position than Windows or macOS here, since the app has to at least go to the trouble of enumerating and requesting the permissions it wants. PC operating systems don't typically sandbox desktop apps by default, so the Windows/macOS versions of this would have free reign over anything accessible by your user.

On the latest version of macOS (Mojave), applications need to request the users’ permission before accessing photos, emails, webcam, microphone, calendars, and contacts, like how they do on iOS.

Neat. Hopefully that becomes standard practice for desktop operating systems.