There's bo world in which "good sites" ask for many permissions in one go, and the bad ones don't.
> And just to be clear: the permission screen should make it really obvious that a site which can access the file system API can access files on your computer
When an site/app requests several permissions at once, this "really obvious" becomes a wall of text full of technical and non-technical implications that very few users will read or indeed understand.
We literally have this already on Android and to a somewhat lesser extent on iOS.
We could go for a different one: https://cybernews.com/privacy/android-apps-are-asking-for-to...
There's bo world in which "good sites" ask for many permissions in one go, and the bad ones don't.
> And just to be clear: the permission screen should make it really obvious that a site which can access the file system API can access files on your computer
When an site/app requests several permissions at once, this "really obvious" becomes a wall of text full of technical and non-technical implications that very few users will read or indeed understand.
We literally have this already on Android and to a somewhat lesser extent on iOS.