...Good! The "prompt" permission model is fundamentally broken, because all it does is train you to click through the prompt. The "click the blocking button an

...Good! The "prompt" permission model is fundamentally broken, because all it does is train you to click through the prompt. The "click the blocking button and turn it off" model is much better. It still trains you to turn off blocking when something is broken. However, crucially, that's only when it's broken. When it's not broken, you just use the site, instead of habitually clicking through the permission prompt that's just harvesting data, not actually needed to function. And yes, malicious sites can of course display themselves as falsely broken until you grant the permissions. But this makes them more annoying to use, granting a UX edge to the honest sites which don't request unnecessary permissions. In other words, the incentives of sites and users are more aligned.