Hmmm... so are we imagining a future where every website has a vector to mainline prompt injection text directly from an otherwise benign looking web page?

In response to microphone or camera access proposals you could have said "so we're going to let every website have a vector to spy on us?"

This is what permissions are for.