I wouldn't be so quick to assume Nokia is doing their job when it comes to such things - there are many cases of iPhone apps that rely on capabilities they shouldn't have to implement behavior the user doesn't want. In general, the entire point of a capabilities system is to allow the admin (you) to audit precisely what an app can do - but Aegis makes this quite difficult to do.

ja-pc: I know the output from that is more than a little bit cryptic, but once you understand a bit about what Aegis actually does it's not too hard to understand what a given app is allowed to do.