Yeah, the author and people are fussing over without reason. Regular users do not understand the implication of sideloading apps. I have had people get their telegram/whatsapp hacked because someone sent them a malicious link and they sent their login credentials to that website/app.

Restricting sensitive permissions will mean such people are better protected from such mistakes. Advanced users can still bypass the requirements even though it may be slightly complicated.