1PW The most infuriating, but predictable, part of that article:
SquareX contacted Apple with its findings and received a “wontfix” reply, the explanation received being that the animation is present to indicate changes, and that should be enough.
Because there appear to be a number of nefarious ways to use the API in question, it would be safer if there were an explicit warning that doesn’t disappear until the person looking at the page dismisses it. A simple animation or pop-up that disappears after a few seconds doesn’t seem to be sufficient. At the very least, make that one available option.