browser extensions are the perfect example because the permissions dialog trains people to click through - then the extension phones home with everything. same pattern with free file converters, which is why swapfile.live converts everything in the tab with nothing uploaded. the fix in both cases is architectural (no data leaves) not policy (promises not to look). what permissions do you consider instant red flags?