It can only be taken off the phone if the user explicitly gives you access to it...

It can only be taken off the phone if the user explicitly gives you access to it. And it’s just contact info, not an “attack vector”.

Are you really arguing developers shouldn’t be allowed to write address book utilities on iOS?