While I agree that FB Connect as the only login option is a bad idea, I also don't think that the average user even reads the permissions dialog. We've run a few A/B tests in the past of asking for different permissions- there will be a decline when asking for more, but not a significant one.