I am not sure but this is because of block Get Package Icon
A possible reason:
If you think that block returns a path to existing image then you are probably wrong.Because it creates a new image from bitmap and then returns path to newly created icon.
So it needs WRITE and READ permission.