It was always possible to ask the user for permission when you actually want to store something on their device, ie. go for an opt-in model.