(Source: ZDNet) A website giving you a fake security warning that you need to click to dismiss is much more believable if it can make your phone buzz the way other notifications do, so it could trick you into clicking something you shouldn’t. That’s why the spec says your browser has to tell you about sites that use the API and let you turn it off.