Sensible people would do that (asking for just the features they need), but look at us, are we sensible?

Most of us* are working for places whose analytics software transitively asks the user for permission to be tracked by more "trusted" partners than the number of people in a typical high school, which transitively includes more bytes of code than the total size of DOOM including assets, with a performance hit so bad that it would be an improvement for everyone if the visitor remote desktop-ed into a VM running Win95 on the server.

And people were complaining about how wasteful software was when Win95 was new.

* Possibly an exaggeration, I don't know what business software is like; but websites and, in my experience at least, mobile apps do this.