That&#x27;s a pretty good summary. It can be pretty tough to analyse permissions across a big Java application though, which is harder than analysing a small C programme that does some kind of math simulation or something. So I can see the real world application of this paradigm.