Hi. Your questions are totally reasonable and been raised at gplay several times. In general confusion mostly comes from Android`s permission name.
KSC app requires just an access to phone`s IMEI number, which is used to generate an ID, necessary for app to operate. However just getting access to this value (=IMEI) is not possible on Android w\o permission or via a separate clear permission.
Instead it is a part of "phone" permission.
BTW, Kaspersky team is already working on removing this permission request in future versions.