It's only sorta ok right now because nothing uses it normally. If it were used mainstream for some legitimate purpose, that permission dialog would get ignored, and it'd become a security risk. USB isn't something web needs to touch unless you really know what you're doing.