> so every "web page" has all the capabilities of a "web app" by default Hasn't many (if not most?) major expansions of capabilities been behind a permissions

> so every "web page" has all the capabilities of a "web app" by default Hasn't many (if not most?) major expansions of capabilities been behind a permissions prompt, making them not available to every web page by default?