I can't see why this would "never going to happen" - even after
reading your great examples.
The security model on the Android platform is not good enough as of
now. I have a couple of suggestions that I really hope that the Google
Android developers will take into consideration:
Even though there is a user-controlled installation where the user
accepts the functions the application can access, I believe that this
should be made better in the following way...
The developer that creates an application should specify which
functions:
D.a) are mandatory for the application to work
D.b) is used by the application but is not mandatory
The user should be able to:
U.a) accept or deny installation like today
U.b) specify which of the D.b (see above) functions that the
application should be granted access to 'as is' and which ones the
user wants to accept every time the application makes use of them.
For special security like programatically accepting incomming calls,
programatically hangups etc. the Android might have the user accept
these settings in a 'are you really, really, really' way. Maybe the
Android could even show a little notification in the notification area
everytime such a functionality is triggered. This way no one can say
that Android phones 'just drops calls'.