>I still don't understand why the highest entropy APIs aren't gated behind browser consent.

Surveillance era!

You can thank big tech that made their money off ad tech for that