Do you remember first few proposals of WebUSB where security section was just "mmeeeeeeh, nothing bad can happen"