Why not? How is this different than, say, location access, or microphone access?

I want to be able to configure this per web site, and a permission prompt is a better interface than having an allow/deny list hidden in settings.