Maybe on setup you have two modes - default and paranoid. People can opt into paranoid to get fine grained control but otherwise auto approve within sensible limits.

Less intrusive settings are ones you don’t have to look at at all.