Exactly. Allowing users to deny apps access at runtime rather than install time is the better approach, since apps will usually still do something useful even if you deny them access to your address book or location. Only the dialog and maybe the granularity itself could be improved.