True but for web apps you use the same way to give permissions to use your device sensors you would use for a native app. The only difference is that it doesn't pass through the app store review process and apple gets no cut for it.

> for web apps you use the same way to give permissions to use your device sensors you would use for a native app

Which would mean any malicious site a user got tricked into visiting can access the native API. (Downloading an app is more deliberate than visiting a site and instinctively clicking to make the pop-up go away.)

All I'm saying is there are non-financial reasons why an OS designer might sandbox websites from the native API.