Android already needs specific permission to access the network.
However, a while back, google modified the play store to grant that permission to all apps that request it, silently, without mentioning it to the user, and without any option for a user to revoke it.
So, the code is already there, but Google chose to effectively disable it.
Draw your own conclusions!
https://developer.android.com/training/basics/network-ops/connecting
Biting the hand that feeds IT
