Yeah, they'd show you a list of a dozen things that the app was going to use and you basically just tapped the "accept" button because you wanted the app to have access to your photos except now it has access to your contacts, location history, notification center, and firstborn child. Android Marshmallow brought improvements in this area, though.
Yes an a responsible person that downloaded a photo app that requested access to "your contacts, location history, notification center, and firstborn child" would choose not to install it.
If you continue to install those apps you only have yourself to blame IMO
Using a Core Android App developed by Google, that used to be a part of ASOP, and it required to be installed on all Play Store Eligible Android Devices is not a good example of "Pretty much any app does this"
I have all kinds of apps that do not do this, only asking for permissions they need
