Cool, that is exactly what I had in mind.

So, I guess the real problem is just developer education.

There have been many times where I've refrained from using an app solely because it needed access to my profile when I felt that was necessary.

Then again, maybe only geeks/the paranoid care about stuff like this.