> But literally every app requested every permission

They didn't. Google regrouped and renamed the permissions until every normal thing that every application needed became grouped with rare and powerful capabilities.

Except for the ad-based crapware, almost all applications minimize their permissions.