I think he means browser permissions, for example when browsers want notify or record your mic theres a permission check something similar for webgl.

It's about explicitly deciding to allow certain capabilities on a per-website basis. No major browser allows defense-in-depth via fine-grained website permissions.

Even simply changing the user agent was sabotaged at Firefox, and choosing one user agent per domain is wishful thinking.

This is actually illegal under GDPR.