This is so critical, we've been scrutinising permissions on smartphones for so long & yet we have like an unlimited buffet for consumer desktop applications this entire time.