These phones should offer 3 environments: The one which Google likes, where Banking apps and Wallets reside and only verified apps can be installed into, then the normal one, where our all crappy apps run, like weather, whatsapp, and an unrestricted one, where permissions aren't required at all. Though it should be hard to install an app in the unrestricted environment, like force the use of adb for the initial install. Unrestricted should hot have access to anything running in the secure environment.