They're basically things along those lines. They're more nefarious when background services quietly error out and you need to dig to find it was a newly required permission.