It does seem that via ADB you can systematically search for programs based on the permissions they have to do things, which at least gives me the feeling, who knows how well justified, that I can cull all the random "install unknown apps" permissions on this thing, which I guess is something approximating progress.
The depth to which this OS hates the idea that anyone might want to change the default settings is really remarkable.