More control over ESI permissions would be nice, so whilst an application may request a bunch of endpoint permissions, it would be nice to be able to control that per endpoint so we can restrict it further to only a subset of requested permissions.
This would prevent an application doing an endpoint permisison land grab, we can control each individual endpoint specifically and the application can then test for each permission like they do on Android.