In a mobile browser, this would also be not as easy as in an app because the permission would have to be requested on-demand (or on page load), if I am not mistaken.

E.g. this demo triggers a permission prompt:

https://sensor-js.xyz/demo.html

I also agree with your other points though.