Only give the permissions you want the device/agent/human to use - no more.

Same for anything whether you trust it or not (or somewhere in between).