[BystanderX]

Because if there's a facility that grants out-of-browser data to the remote, the remote can deny service unless it is enabled.

Unless the feature is designed to fake data and make permission status opaque to the remote, it's a privacy reduction that will happen, the only question is when.