@Paradox @prettygood It's insane that API just has blanket access, instead of needing to query the user every time or being restricted solely to the same page/domain.

In its current state it isn't absurd solely on Qubes, and that only if one uses a qube per GUI application.