Hi everyone,
Yes, the Cloud Compiler currently does that because we don't yet have a method to selectively enable/disable features in CocoonJS, so every possible permission that any part of CocoonJS can ever use must be requested.
We're working on a system to selectively enable/disable certain parts of our system (camera,store,ads...) so those permissions aren't needed, but it's not yet finished and it'll take a few weeks at least to be released.
Until then, we think your only option is to try your luck with the apk tool other users have suggested.