Google Chrome allows web apps full access to your USB devices if they can trick you into accepting a permission prompt.