The whole "user interaction" permissions model should just be scrapped for an unmute button in the browser chrome.

There’s no way to have permissions that depend on things that happen inside the content box / “unsafe zone” that can’t be gamed.