Yes, that can happen.

by R. Proffitt Moderator - 4/24/13 8:04 AM

In Reply to: Implication of installation an app by christy

For example an antivirus (which is still a matter of debate) would need all permissions as it will need to do that.

So yes and yes.

Unless the code is open source you do have to trust the developer a little.
Bob