Security scenario analysis: supply chain permission abuse — failure modes, real-world examples, indicators and defensive countermeasures.