Also worth mentioning that there’s a ton of stuff that browsers just hands over to websites without making so much as a peep to the user. It’s great that they pop dialogs for the things they do, but they’re still far too permissive.

By default, sites shouldn’t have access to anything more than a JavaScript engine and HTML rendering facilities. If they need/want more, they should have to make a case and earn my trust.