Ah, I didn't realize that the permissions can be configured per string by the wallet (at least Alby does that) even though it's not mentioned in the spec:
edit: Oh, I forgot that the info event is per connection string, not per wallet. Then it makes sense that you're supposed to declare what this connection allows with it.
even though it's not mentioned in the spec: