Reply to post:

To me this illustrates that, Google Play vetting aside, the real problem that Android has (or at least, has had - I've not used Lollipop yet) is the lack of ability for a normal user to control what permissions an app gets.

Android M does