The exact methods may differ but the answer is the same, money.

I gave permission to Firefox, but honestly most of my services weren’t affected because I connect to 99% of them via Tailscale which doesn’t seem to trigger the permission. (Yes that was an absolute nightmare to figure out why only one service was failing to connect)