"But my initial assessment is that the protections described in the spec are inadequate and I am of the opinion that this should be marked harmful." [0]
[0] https://github.com/mozilla/standards-positions/issues/154#is...
[1] Specification Positions https://mozilla.github.io/standards-positions/#native-file-s...
This may sound dumb too, but I expect my browser just show me web. When I reset my browser (and IP address), I expect a clean slate, and with this API I won't get it. When I install apps, I use very different due diligence. Without clean slate after resetting my browser, I'd have to change my browsing habits radically [0].
A side note, DNS over HTTP (DoH) bothers me too, spec is silent about setting cookies, DoT is cleaner in this regard.
Browsers don't currently give you that, and never have. You can download files, and these files remain on your system even if you re-install your browser.
> This may sound dumb too, but I expect my browser just show me web.
Browsers are just a sandbox for running applications that are downloaded over the network. Some applications need web cam access, some need access to files on your system, some need geolocation, and so on. Browsers let you choose what permissions to give applications. Because of this, you're completely free to let your browser just "show you the web" in whatever sense you like.