Android app permission system and notification system require major overhaul. Android permission and notification need more tight, fine-grained, and centralized access control. Google Play store also need more strict regulation on app acceptance procedure.
I was very disappointed by the the recent Facebook Android app privacy leak fiasco. Facebook app on iPhone has no such privacy problem. On privacy and security side, iPhone is far better and safer than Android phone.
Just requesting permission on app installation is obviously not enough and not effective to protect privacy. More proactive action by Google to prevent such fiasco is strongly desired. Too many Android app request too many and suspiciously broad user permissions on installation. And user have hard time to review such permissions.