Comment by nicky0

There is no reason it can't all be done on-device. That is indeed how the current "Enable camera access?" etc. system works.