Hasn't many (if not most?) major expansions of capabilities been behind a permissions prompt, making them not available to every web page by default?