My phone has its own flashlight app.
The biggest problem I see is that the way Android asks for permissions is flawed. If you don't agree to any of the permissions an app requires, it will not install, so of course many users end up agreeing to the permissions request, particularly when there is no similar less-privacy invasive app available.
The way the permissions should be done is by individual selection toggle switches on each permission and any permissions set to 'No' will make the OS act like that feature is not present.
For example, if you select "No" to GPS, webcam, contacts and SD card, then Android should act like the phone has no GPS, webcam, SD card or contacts to that app and there should be no way of the app really knowing whether these features are disabled or even present.