Agreed. The default behavior for the web audio/video autoplay attribute should depend on a permission request for whitelisting.