> The fact that many apps choose to require excess permissions and can then bypass standard locations is a different matter

It's not when that choice is never presented to the user.