IMO they should take some cues from IOS and allow users to allow/disallow such things when apps make the requests, not dump all permissions as allow all or none when users install the apps.
IMO this all-or-nothing mentality when it comes to installing apps is the single biggest problem with Android right now, trumping even the perceived fragmentation problem.