You are working on a functional bug in a tool used by your development organization.

Nothing, because it is an internal tool and not exposed to the public.

Remove the grant because it is excessive.

Nothing, because it is not related to the bug you are investigating.

File a security bug against the tool referencing the excessive permission granted.

Nothing, because listing just the required permissions would be an ongoing maintenance challenge.