Yeah. My whole point here is that I still want access to all my stuff like before, but if they are so damn worried about security they should make it ask for USER CONSENT with all the big and scary warnings about data theft that they want. Having those warnings will protect Google from security negligence accusations. And as it is there are warnings when you allow a source for installing APKs from (on older versions before Oreo it warned you when you enabled unknown sources).
Unfortunately people click through those things without reading them. It is certainly something to consider though. You have to remember, the general public is not like us.