Make it more obvious that enabling this module will "break" your site.

Agreed and agreed, and i would even go further, and that if possible all permissions should be granted on module install. That would both make it so the module does not make the site unusable until permissions are carefully configured, and also make it more clear how permissions should be used.

Related to ✨ Permission like 'Use Example form mode with user entity" does not grant permission Needs review in the sense that both call for clarifying the permission wording and documentation.