This is already the case. The apps in practice abuse this and refuse to start until the user gives them all the personal data if no store enforcement exists.