Just waving the whole issue away by saying "make it the user's problem" isn't very helpful. It completely ignores the very real problem that most people don't know what is good for them and worse, even the people who do know what is best have a million better things to do with their time than personally scrutinize each and every app they install. Perhaps, the actual solution is to delegate that responsibility to somebody who does have the time, knowledge and incentive to make sure you are secure.

I own an iPhone instead of an Android precisely because I don't want to be burdened with the task of determining if what I'm installing is or isn't going to backdoor its way into my phone. I trust that Apple will in most cases do the right thing. Maybe they won't every time, but the risk of that is less than the cost of time & energy required to play "deep dive into every fucking app I install on my phone".