That's why th ecautionary tale: which of the capabilities of those APIs whould be behind user consent and which shouldn't? At which point will the user just cli

That's why th ecautionary tale: which of the capabilities of those APIs whould be behind user consent and which shouldn't? At which point will the user just click "yes" without reading those consent pop ups?