Blackphone 2: improved focus on security

AOSP or even Replicant is probably what you want then. You can get android without google or any other company involved, if you wish.

I mostly liked the old Android app permission system, until they removed network access as a component. Where else do you get a nice list of the things an app is allowed to do? Certainly not on Linux/BSD unless you audit the source, yourself, or else install a carefully crafted SELinux policy for each. And when there are multiple apps that do the same task (say: solitaire) you can shop-around, until you find one that requests the fewest permissions.

An app update wants new permissions??? Just decline and keep using the old one. Or if you want to try it, just backup your apps before upgrading, and reinstall the old one if the new version has undesirable changes.

Unfortunately the most recent revamp REMEMBERS that you (perhaps accidentally) accepted the new permissions of the app update, and will reinstall it without any extra prompting, requiring you to clear the Play Store's app data before rolling-back.

I'm not so sure Cyanogen's system of allowing users to limit permissions would work on a larger scale... App developers would start including unit tests to see if they actually have each permission up and working, and if not, the app just exits.

Have a look at the permissions granted to default apps preloaded with the phone that can not be uninstalled.

App name: S Memo
App function: Notepad for android
App Permissions:

• read phone status and identity
• edit your text messages
• read your text messages
• record audio
• precise location
• modify your contacts
• read your contacts
• add or modify calendar events and send emails to guests without host's knowledge
• read calendar events plus confidential information
• modify or delete the contents of your USB storage
• add or remove accounts
• create accounts and set passwords
• find accounts on the device
• use accounts on the device
• modify secure system settings
• control near field communication
• full network access
• view network connections
• view wi-fi connections
• close other apps
• reorder running apps
• retrieve running apps
• run at startup
• prevent phone from sleeping
• read sync settings
• read sync statistics
• toggle sync on and off
• modify system settings
• test access to protected storage

Seriously, WTF? This is an application to write notes and save the results as a file. Why would hackers bother trying to crack the operating system when they just need to find a flaw in S Memo?
Why does a note taking application require all of these permissions?
Why can't I, as the device owner, disable this application from using these permissions?

Yes. I feel like others have rooted my phone before I even used it. Perhaps a law should be passed compelling hardware and software manufactures to give users root access to all hardware and software when purchased.

Reminds me of what they have done to prevent users from accessing the computers in their car.