Again why would you think Apple the browser maker would be any more or less careful about Safari not allowing websites to access your camera, GPS, photos than Apple the operating system maker?

No one thinks that app review is what stops malicious apps from circumventing permissions. It’s the operating system itself.

And you really don’t want to compare the state of iOS updates to the state of Android updates do you?