By not having INTERNET permission, so users can be somehow assured their data's more likely to stay with them. Why the launcher would need one?

Android really needs a sane custom permission system and some content provider protocol standardization (like "this app provides weather data" and "this app may access any providers that provide store prices") and a package manager that support dependencies on them (similarly, "this app needs a news headlines provider").