That's what I'm saying. It should also prompt for permission if there's no audio/video involved. Visiting a random site can make you upload and download illegal

That's what I'm saying. It should also prompt for permission if there's no audio/video involved. Visiting a random site can make you upload and download illegally at the same time. Therefore there's no justification for it to be enabled by default if just JS is allowed.