Would that include the "Run" button on a downloaded executable? While obviously we want to do as much as we can to discourage users from shooting themselves in

Would that include the "Run" button on a downloaded executable? While obviously we want to do as much as we can to discourage users from shooting themselves in the foot, there are limits. At some point, eventually you _do_ have to trust that the user knows what he's doing. Giving users a choice on when to allow a page access to one specific USB device is not a "disaster".