App Security reports permissions that aren't granted

In App Security, for an individual app, it will list sensitive permissions. When I go to manage permissions for that app, most of those permissions aren't actually granted. My first question is - is that list just what the app wants permissions for, not necessarily what its been granted? ... Below that is a section titled "permissions." There are permissions listed there too. This list doesn't match up with the actually granted permissions either. Sometimes, some of them match up if I assume that "other" includes the notification permission. ... So, I don't understand how to make this app security permissions audit useful. Am I missing something? Thanks! (I did read the "i" information pop-ups, didn't help)