One of the issues is that to a lot of people some of the reasons apps need particular permissions is pretty opaque. especially when requested up front. While with flashlights it might be obvious, with even slightly more complex apps it leads to a culture of 'fuck it'.