Yep. There are some ridiculous web APIs out there that expose all sorts of things you'd think should remain private. Take the Battery Status API for example [1].
[1] https://developer.mozilla.org/en-US/docs/Web/API/Battery_Sta...
[1] https://developer.mozilla.org/en-US/docs/Web/API/Battery_Sta...