Chrome and Firefox have deployed / are deploying local-network-access which prompts the user when apps try this.
I was just about to say that my question in regards to this was "what are web browsers doing about it?"
I just discovered that MacOS was blocking Firefox from connecting to devices on my LAN - there's per-app toggle in system settings.
Access to my router's web interface was not blocked (understandably) but this left me rather confused for a while.
I've seen it and at least in Chrome it seems to be treating all URLs which are based on an IP address as "local", regardless of the class of the address.
Any idea if Safari is on board?
I guess that's why I am getting so many "Allow to find devices on your network" alerts. Good feature overall.