How do permissions work in the Android Market?
The permissions are entered by the developer, yes.  But the Android OS only grants those specific permissions, and no others.  Therefore an app could try to do something it wasn't allowed to, but it would fail (barring a security exploit).  See http://developer.android.com/guide/topics/security/security.html#permissions for more details.