Just to clarify: what I mean is not that there are no permissions, but that apps stop requesting permissions they don't really need and that, by default, they just request no permissions at all.

It would be nice if this was just the default, for everyone, and if companies just embraced a simpler model and stopped requesting permissions to do everything even though they don't really need it. This came out recently and seems very relevant.