I wonder if the security concerns could be limited by opt-outable warnings on first use. Let's say you gave a malicious site access to the camera profile. Wou

I wonder if the security concerns could be limited by opt-outable warnings on first use. Let's say you gave a malicious site access to the camera profile. Would it be sufficient for an implementer of the profile to show a dialog saying, "Click here to upload all your photos to XYZ.com"? [Or, even better, show thumbnails of the photos which would be uploaded] Is it more real for users to allow specific access at a specific time than just a blanket "ok" at install time? Is there a way to have one's cake and eat it too?