I disagree. I don't know that they've got the right balance until I try it, but anything is better than eg Facebook having permission to just about everything and presumably using it whenever some algorithm tells them there might be useful data to grab.

Forcing them to ask every time will either show my concern is wrong (a good thing) or stop them doing it (even better).