They aren't being fined over a permissions flow, they are being fined over using user data. I don't know how many fines it will take before the programming community realises that you can't weasel out of breaking the law by abusing a technical measure.

"Your honour, I did not break into this man's house. Last week he gave me his key ring so I could copy his car keys, so I took the liberty to write down all his bitting codes and made a copy of his keyring later. Since he gave me his key, I was authorised to be there and did not break in."

... is literally the excuse Meta is trying to use, except it's about photos.