I'd be happy to get some limited exceptions to this, like "3rd party camera apps can get pre-granted location access, but only if the developer agrees that the location data will be used for nothing but EXIF tags, and if it is ever found to have left the device the developer gets delisted from the app store."
If the iPhone calculator app team said "We're going to turn this into a social calculator and it's going to use your photo library to automatically identify receipts to calculate tips and splits, and we're going to do the image processing on the server and make a database of where we identified your receipts to help with identifying restaurant payment locations," somebody higher up would tell them "No, we need to do receipt recognition all on-device." That makes it a lot easier to avoid accidental data leakage.