Every time these new user tracking hacks come up (like the one based on Audio API etc.) I wonder why in the world this is not handled in a manner similar to Android where it prompts you to give permissions to the any specific API its going to use.