I don't know if you're being sarcastic or not, but here's the thing:
I don't want websites asking me to enable notifications. 99.9% of the time, the answer is no.
I don't want websites asking me to enable location access. 99.9% of the time, the answer is NO.
Nor do I want them asking for permissions to install to my Home Screen (the answer is no), or to track me (the answer is NO).
>Or ask browser vendors to have a global allow/deny flag for every Web API
When possible, I've carefully configured my browser to automatically reject these requests, but instead of respecting that, these websites, with all their hubris, have chosen to circumvent my preferences by presenting shitty JS-based permission requests (as opposed to using the permissions UI built into the browser).
Each one of these new web APIs have significantly degraded my experience as an end user, by presenting a million permission dialogs whenever I'm visiting webpages, without providing me with any features of value (again, because I'm not ever, ever gonna trust some random website with these permissions).
Users don't care to pontificate about the virtues of the open web, they just want their stuff to work. And until the open web can provide a better user experience, of course users are going to flock to various walled gardens (App Stores, Facebook, etc...). Until we find a way to implement web standards elegantly, without degrading the user experience, the open web is always going to face an uphill battle over the relative safety of walled gardens.