Most of this thread seems to be people upset that this exists. Do people not realize can control javascript permissions?
It's not at all clear that a similar widely applicable use-case exists for Bluetooth.
"The web has all these limitations, how can a device run only web apps" "Oh well we're google, we'll just shoe-horn whatever shit we need into web specs and force them through."
When this came up for discussion a year or two ago, it was highlighted that they acknowledged the potential for harm, and gave zero solutions to resolve that issue.
Edit: its an almost comically similar story with their other attempt, "web usb"