These are great ideas, Carl! Yes, we are internally reconsidering the concept of “app permissions” which we currently have, and thinking about replacing them with “station permissions” as you suggested.
As for the ease of navigation for the operator, have you tried creating a “Routing App”? This is an app that is just dedicated to helping operators select the right app to start with.
More details here: https://support.tulip.co/en/articles/3248901-how-to-navigate-between-multiple-apps-by-creating-a-routing-app
After you start using this concept, you would only give permission on the station for the one routing app, and then operators can navigate from there based on app logic.