It does. But that is not adequate. Unfortunately Google does not understand users at all, and hence, unfortunately does not understand practical security. The

It does. But that is not adequate. Unfortunately Google does not understand users at all, and hence, unfortunately does not understand practical security. The first thing you have to understand is that users click everything, especially when it isn't doing what they want. So websites throw these prompts up endlessly, hoping users will inadvertently click it. Worse, some sites will abuse alert() and essentially demand the user accept installing an extension or enabling notifications to proceed. (Particularly guilty here is search ads and the garbage ads Edge puts on their new tab page.) Then the doubly problematic design here is that websites can prompt people to accept these, but users have to find an obscure setting to either remove those approvals or deny new requests. Users by and large don't even know that exists. I disable notification requests in every browser I put my hands on, but unfortunately I can't put my hands on every browser on Earth. It's really up to web standards bodies and browser vendors to realize the API is doing drastically more harm than good.