In many respects, aside from the Internet permissions thing, Android M does exactly what CM PrivacyGuard does. The difference is that PrivacyGuard tries to operate transparently to the app while Android M is more invasive.