Ah. Missed that point.<p>What&#x27;s the highest permission an app can have? Wouldn&#x27;t that be the limit of the vulnerability here? Also, many permissions require manual granting, e.g. contacts, camera.<p>Edit: also, that could be mitigated partly by requiring user approval of any updates adding permissions.