It might be gyroscope access triggered by the WebView, but that’s unconfirmed. You can keep it denied.