We want at least some kind of “permission” UI similar to the request to be able to access location, microphone and camera in browsers before this feature is enabled by default. This is currently experimental and disabled by default because we want developers to be able to play with the new API, but as a user who does not want any IP leaks you can just keep it disabled.