Stewart The only permissions required are location and networking, I am pretty sure Doordash asks for more permissions.
Yes, for the wipe command or SMS activation you need to give it the appropriate access but that's sort of a given. Its not required either, you just can't use certain functions.
I am not really sure what you expected, in order for an application to call a wipe or lock the cellphone it requires administrative permissions. Plenty of other applications ask for this, such as Wasted