Do we even need the restriction. We're talking about spammyness of a UI element because access requests are misaligned with user desire. All you're saying is

Do we even need the restriction. We're talking about spammyness of a UI element because access requests are misaligned with user desire. All you're saying is the site will pop up a request for access whenever I do anything, ok, how is that different to what we have no? It's not going to be the norm, it's just going to be a few bad actors. Doesn't mean we put up with spam everywhere else.