It could well be that it's not asking for camera permissions. It's just fingerprinting whatever hardware is connected, and one of them just happens to be the camera.
Not that this is a reputable source, but https://fingerprintjs.com/blog/browser-fingerprinting-techni... suggests that fingerprinting a media device requires the site to have camera permissions. Which is also what I would expect. But perhaps I’m just too hopeful