That “allow notifications” popup is way too small... instead, it should pop up in the middle of the screen, have big bold letters, and gray out the website in the background. Then wevsites would be much more careful about asking you about it...
This is frustrating because this isn't a difficult UX problem to mitigate. Opera 12 for example had excellent distinction between in-page and browser-powered UI prompts. It will always be possible to socially engineer some people, but making it a bit more obvious isn't difficult.
Firefox at least has very slightly more distinct pop-downs than Chrome's.
Malicious sites can trick you into accepting too:
https://www.reddit.com/r/assholedesign/comments/9p3172/yeah_...