Agreed regarding the fact that this is, at the moment, not the biggest privacy concern. Of course, I also believe it should be packaged along with the other concerns, because I would argue that each of these capabilities can be called in security terms:

violations of the principle of least privilege