Then why do they still take so long?

LLM should still be able to catch a misleading permission message though.