The problem is that you cannot just add a new permission and expect things to not break. The flow for requesting permissions is different and would break pretty much every website that uses these APIs.