The API for apps is also flawed. I’m not sure about Android but on iOS apps are told whether the user has given them full or partial access, and some apps needlessly ask for full permissions when they don’t need it. Apple themselves set a bad example with this, iMovie for iOS won’t even launch without full photos access