That&#x27;s what I&#x27;m saying. It should also prompt for permission if there&#x27;s no audio&#x2F;video involved. Visiting a random site can make you upload and download illegally at the same time. Therefore there&#x27;s no justification for it to be enabled by default if just JS is allowed.