Yes- Knox looks very interesting. Smart move. Online banking is obviously a tricky one to find a work around when using custom ROM devices yet Samsung Knox looks like a good idea.
My main banking work around is to keep it simple and be a little bit old fashioned. Cash instead of card being the main one. I live in a big city and actually enjoy going into a shop and buying in person
Regarding your suggestion on disabling permissions- well I'm a bit of cynic and remain highly sceptical. I simply don't believe the data mining, location tracking and browser fingerprinting can be defeated that easily. Very powerful interests (the MOST powerful ones) have an agenda which requires all these thing to proliferate and become normal, accepted and even defended (talk to the younger generations- they "never have anything to hide". Many of them want this - I prefer privacy, freedom and individual choice- but I guess fashions change don't they.
I'll follow up on Knox- Thanks.