Flatpak does something that looks like this with various xdg-open portals but the permission is implicit (hitting open is the user confirmation itself) which I

Flatpak does something that looks like this with various xdg-open portals but the permission is implicit (hitting open is the user confirmation itself) which I don't get why it was implemented that way.