Maybe it will depend on the specifics of their UI/UX implementation, but I don't think you'll end up in a scenario where you're surprised that a website suddenly has access to your serial ports. I expect the UI will be fail-safe, very visible, and that you'll be able to disable it entirely if you wish, so that you never even see a prompt.