The store can do whatever Microsoft wants it to be able to do. Updating and installing apps necessarily involves more permission than the apps themselves have access to.