Let's hope the filesystem API does require user permission and that anyone building such a service follows the law. You know that GDPR doesn't require pop ups

Let's hope the filesystem API does require user permission and that anyone building such a service follows the law. You know that GDPR doesn't require pop ups unless the service is doing something that isn't otherwise lawful?