Currently on legitimate and decently built sites I get a custom JS modal popup that asks me to accept the location request before they even request location access. They do this because otherwise their location request gets dismissed by users out of habbit and then people don't know how to reenable it.
It's shit UX.
Notifications and always on location access should be a bell icon in the url bar. Think YouTube notifications.
On top of that, there should be a "use location" html element that sets it's value to the current location when clicked. It would also be nice if that threw up a warning when proxy settings are detected.
That said, the bell icon not being intuitive doesnt stop YouTube.
Likewise, channels switched to "like, comment, subscribe, and don't forget to hit the bell." Literally overnight.
I just see this concern as a non issue.
Such people just click yes yes yes to these popups without reading them (thinking theyre EU cookie, T&C, privacy prompts, etc). Its a prime vector for malwartisements these days.