Well, you're running the browser as your user, so having your user's permissions and you (I guess) have permission to access the camera. So there's no problem the browser accessing the camera. As to "browser security model", that's your model, not that of the browser which is closed-source software produced by a hostile corporation. The solution is kind-of obvious no?