This, and certain other capabilities, should be guarded like access to location data: Available upon user agreement only and just on secure connections (i.e. TLS).