It's problematic because unlike the dangerous permissions, bypasses weren't treated as bugs. For example, it's possible for apps to make HTTP GET requests by opening a URL in a browser via standard intents. Those intents would all need to require INTERNET or consent for each use.
This Tweet was deleted by the Tweet author. Learn more
