Ok, just answered my first question. Clicking the ALL button doesn't actually select all the permissions, only the required ones. Perhaps if that button was renamed to something like 'Recommended Permissions' it would be a bit clearer.
I'll try and do some testing regarding my second question