Google should silo those into separate categories to generic "internet access". Same with ad access. Sending data to pre-whitelisted, registered and trusted sites that register with Google in advance should be in a different category to "upload to random server in china".

Isn't there an entry point on the OS/Google Play side that allows the dev to get crash reports?

Also, I think analytics should be something fundamentaly optionnal, at least from a privacy POV.

>Isn't there an entry point on the OS/Google Play side that allows the dev to get crash reports?

There is, but there are multiple crash reporting services that provide more features than Google (and just having some competition in that area is pretty great).

In my company, we use Crashlytics on Android & iOS and Bugsense on wp.