Browsers have had location access APIs across all operating systems for a while now. Chrome at least can surface Bluetooth and USB information to sites (not sur

Browsers have had location access APIs across all operating systems for a while now. Chrome at least can surface Bluetooth and USB information to sites (not sure about Firefox, but I think it can too). The only thing that’s missing on desktop browsers is contacts access APIs. Putting that all aside, there exist legitimate uses for those APIs, and just because Facebook abused them doesn’t mean that they shouldn’t exist. Lack of those APIs wouldn’t be seen as privacy friendliness, it’d be seen as a feature deficiency and would push people to other platforms. It just means that the platform in question has to put reasonable limits on access (“Allow access only while app is open”, “require permission again after X days”, etc) and users need to be more discriminative as to which apps/sites they approve access for.