The user agent gets to choose how the permission requests are shown - that's not part of the spec. For example, they can choose to ignore permission requests un

The user agent gets to choose how the permission requests are shown - that's not part of the spec. For example, they can choose to ignore permission requests until the user has interacted with the site for a significant amount of time. They can make the permission prompt more explicit and "scary". They can choose to only allow notifications after the site has been added to the home screen. This is not a question of safety at all - Apple has control over how many people get tricked via their control over the permission prompt.