I know it works like that, the part about "clicking allow'" was a slight oversimplification which doesn't change the point. Do users understand the security imp

I know it works like that, the part about "clicking allow'" was a slight oversimplification which doesn't change the point. Do users understand the security implications of giving access to a device in the pop-up? I don't think so.