> For the first of these, I quite like how on Android now the user has great control over what data is made available to which apps. The app needs to explicitly request access to camera, location, files etc... . You can toggle this on or off at will, and specify that it can only read the data while the app is active. I can imagine having regulation which enforces this type of privacy control for all tech service providers.

And the Android stock permissions are laughable and a pure joke.

Go look at Xposed Framework, and you'll find ways to unwind every permission, either direct deny, or "make fake data" plugins. There's even fake contact plugins, GPS faker plugins, you name it.

Google only implemented the worst-of-worse deny permissions, because doing a good job would be against their interests.