Odd permissions
There are apps for rooted devices that allow you to restrict permissions. i.e. you can install an app that asks permission to access your address book, but it won't be able to when it tries. This will cause some apps to force-close, however.
IMHO, this facility should be a basic feature of Android, and developers should code their apps such that they don't die when told to feck off when asking for a permission.
Ideally a clean Android device should ask permission the first time an app asks for certain sensitive permissions (address book, things that cost money, SMS, location, etc). Users should be given a choice of "always allow", "never allow" or "always ask".
With regard to permissions look at this lot:
Your personal information
Services that cost you money
Your location
Your messages
Network communication
Your accounts
Storage
Phone calls
System tools
Now, what do you think would need all of those? Eh?
HTC's battery widget, that's what. And, because its installed from the "HTC Hub" app, you don't get to see these unless you happen to browse the app in the Manage Applications settings screen.