>convenience trumps privacy in practice in a lot of cases. T

I quite recently found that the "CRED" app works by requesting permission to access the user's WHOLE INBOX and reading their mails. The users apparently have no problems giving access to their all mails to some app that they don't have control or ability to scrutinize.