So just add a manifest to a web app, like in KaiOS, the third largest phone OS? A permission model isn't hard to implement