Yeah, explicit confirmation is nice. However this is assuming Chrome won't have a whitelist of favoured domains that can bypass permission prompts like it has

Yeah, explicit confirmation is nice. However this is assuming Chrome won't have a whitelist of favoured domains that can bypass permission prompts like it has for other features (audio auto-play, and I believe also some VR-functionality, probably other things on top since I last checked). I gave the linked pages a quick look but it looks like the feature is still being worked on, and...I'm too tired to look through draft spec documents right now...