Why do I need to enable JavaScript to read this text post? What exactly does JavaScript do here except unhide the content? Especially when this post talks about privacy and safety.

Like I often see, it is readable if you disable CSS too.

There is a point that the browser apps take a large number of permissions, but compared to apps, websites take much less of your data. That's one of the reasons why so many websites like reddit push you to use the app on mobile.

> That's one of the reasons why so many websites like reddit push you to use the app on mobile.

The Yelp website is one of the biggest offenders in this regard. If you're not viewing it in desktop mode then be prepared to get redirected to the Play store any time you tap on any link.

I treat yelp and Pinterest links like links on [insert sketchy site].

This is why I don't install apps, research shows they the best and fastest way to hand over your data to many unknown parties. It is why the official appstores (Googles or Apples) are fundamentally untrustworthy. They spread malware as a matter of course.

When Android apps can freely draw over other apps without warning, privacy permissions feel almost like security-theater.

Since the original post seems confused about why a browser would ask for contacts:

A legitimate reason could be so that they can easily autofill forms for you.

What, for when I report my friends to the police? Seriously though, the assumption that I would be one of my own contacts is weird.

android have means to let browser/apps download and save files locally in SD/Download without the Storage permission. Chrome decides not to use it, because reasons.

Yes, that's exactly the point - it's not required to ask for permissions - they still want to.

this is definitely something to think about thank you

its not a surprise that chrome is one of them..