Permission prompts are the web’s main mechanism to protect powerful capabilities that are potentially dangerous to users’ privacy and security.