The problem with policy changes like this is that it will inevitably scoop up some kid just playing around with Web API's. If this were to be a policy change, I

The problem with policy changes like this is that it will inevitably scoop up some kid just playing around with Web API's. If this were to be a policy change, I think we should rather require browser developers to have all sensor features (location, motion, etc) opt-in only which most browsers already do.