This would be solved if they just ported over the revokable permissions that LineageOS implements. You get real security and the app is none the wiser.