OK, good -- thought I might be taking troll-bait, but in that case, glad I could provide information.

In principle, you're exactly right -- but iOS in particular has been notoriously picky about app sandboxing, and there is a very short list of permissions that apps are allowed to ask for: location, push notification, and I believe now address book access.