Yes, absolutely. Such things should require explicit consent from the user and be implemented in such a way that the application can't even tell if permission was granted or not. For a long time now applications have proven that they cannot be trusted to act in the user's best interest. If we care at all about personal computing, then applications should be isolated and sandboxed by default with any connection to the rest of the system under the explicit control of the user.

I'm sure someone will say you should only install applications you trust, but where does that trust come from? How can I judge the trustworthiness of an application if I can't use it first? Must I trust some third party like a community of repo maintainers --not to mention corporate run repos-- and pretend that they all must have my best interest at heart and never make mistakes? Am I required to believe in the fantasy that once trustworthy software will always be so?