As you may have heard, some Pokémon Go players may have given the game’s developers access to everything on their Google account – including documents, photos, email messages, search history and items stored their cloud.
According to NBC News, this is due to a coding glitch, causing iOS devices to give the app full access to the gamer’s account.
This is pretty minor in the panoply of security glitches. Yes, the app requests more access than it needs, but Niantic has confirmed that they don't actually use their overzealous access rights.
We live in a world that doesn't allow granular control over our information. Access control is one of the most complex security mechanisms and is often difficult to implement correctly.
Actually Niantic deserves some credit for leveraging a strong proven authentication source instead of implementing their own.
A scarier thought is what someone like Mint could do with full access to everyone's bank accounts. The fact is that we share far more access than we technically need to, trusting internet companies with not only information, but the capability to act on our behalf.