Thing is, there are "websites" and "web apps"; the latter replace things that we used to have on the desktop and we want significant permissions for them (notif

Thing is, there are "websites" and "web apps"; the latter replace things that we used to have on the desktop and we want significant permissions for them (notifications, constant updates in the background, copy/paste integration, drag&drop integration, camera and microphone access, etc) and the former should get nothing, as all of these can and do get abused - but from a technical perspective they look the same to the browser. The way I see it, it would make sense to explicitly whitelist a website (e.g. Gmail or Webex) in a similar manner to installing an app, and all the other websites don't even get to beg for these permissions.