Also, there should be a permission API around this for each website (like camera/microphone), that explicitly states why the website is requesting this informat

Also, there should be a permission API around this for each website (like camera/microphone), that explicitly states why the website is requesting this information and what information the browser will return to the website.