I don't know if they have this, but a good feature a privacy centric android experience would be, to have a simple accessible log of what app accessed what using which permission.
The code for this was already present in AOSP, Google simply had it disabled / reverted in their builds. We just bring it back like many other Android ROMs.
I'd worry that translating this to an end-user-relevant concept of security would lead to a lot of scares, though.
Probe all the files in a directory to see which ones are “yours”: “What? Why is it accessing all the files? So suspicious!”
Require a specific name pattern or something: “I never have to remember to do this on the other apps…”
There's a lot of these tradeoffs that in human life are resolved through reference to all sorts of subtle human things that the machine knows not of. We're at this liminal point where “app” software is given a bare form of “agency” from a social perspective as an extension of its developer, but it doesn't have the intelligence to negotiate over it much (and I think that's behind some of the model-simplification pressure that's encouraged heavy vertical integration).
1. Google search ads look like search results. While they used to not allow website owners to make their content look like their text ads.
2. Uber shows the rate (and eventually charges) for the maximum possible route from any two locations, when the actual route is generally smaller than that.
3. Amazon charges Import Fee Deposit based on a calculation and when less than that is actually charged, they don't refund it, unless someone actually asks them to.
It seems that world has fallen prey to the mindset, "Screw customer experience, let's extort the maximum amount of money we can."
Technology companies are no longer in the business of making things easier, instead they are in the business of making the most amount of money they can, while not loosing their business entirely. If these companies actually valued the consumer/customer in the past, they've certainly moved beyond that point.