How about letting users decide to which capabilities they give permission depending on what they need? I don't want to push them to download and install a whole software package locally which has usually access to more data and hardware APIs compared to a webapp that temporarily lives in a browser tab.