App Permissions: How much is too much?

I noticed in the latest update that the Steam app on android now wants permission to access my “Device and Call Information” which is a permission that wasn’t needed before.

I noticed this in a lot of apps, where with each update they keep encroaching and asking for more and more permissions.

What do you guys do? Keep granting permissions? Or do you say no at some point?

Is it possible to say yes to get the update and then turn some of the permissions off later?

I believe it’s to handle the SMS two factor authentication.