Allowing that to be automated outside of users control is just another security problem to solve. Why not go all in on this and let the apps approve all privileges for themselves, right? So convenient for the user... That just contradicts the very idea of any approvals from user.

I actually think UAC on Windows has this done more clearly and is harder to go around. Wonder how that would work if it was extended for more granular permissions that apps can trigger on demand.