Yes, that can happen.
For example an antivirus (which is still a matter of debate) would need all permissions as it will need to do that.
So yes and yes.
Unless the code is open source you do have to trust the developer a little.
by: christy April 23, 2013 3:49 PM PDT