In my opinion, the permissions coarseness and inability to revoke permissions is completely intentional on google's part (it's not like they are unaware of what *could* be done):

- they want to obtain the social graph info for themselves

- they want companies to build android apps, and this personal data is the "payment" for that investment. So, just like with facebook, the end-user is not who google is trying to please/protect.