Google Play has hidden applications permissions
Earlier you could disable automatic updates and always know what new permissions a certain update brings - this is no longer possible or available.
This is especially upsetting in terms of installing new apps. What do they do? What do they use?
For instance I've never installed apps which require "Find accounts on the device" (android.permission.GET_ACCOUNTS) because the permission allows an app to find all the accounts on my device (normally an email addresses, including your primary google account, but that can be anything including your phone number, unique IDs in various services) and do anything with them.