That’s insane but kind of valid - maybe restrict access to the light sensor api to same-origin sources?
> Perhaps the most obvious solution is to require the user to grant permission to the website requesting access to the sensor
Which makes sense... a light sensor is really a 1 pixel camera.