I think that one of the reason's we're behind on this is that major players aren't putting R&D into usable clusters of user managed permissions and tools for both power users and average users to manage and introspect them is precisely because they've found a way to both shirk the responsibility and exploit their users with an App Store.

As a result, all users are imperiled.