@zatnosk @ajroach42 I think dialogs as a whole fail to prevent sites from doing bad things. I've seen too many sites that say We are unable to show you our content because you have #JavaScript turned off and users then allow whatever the site and its third party partners want to do.
.
I'd make the client default to being unable to perform most tasks involving 3rd parties.