Don't you need to specifically allow a website to access bluetooth though?
Not necessarily. Google might set that on by default in Chrome. Remind you that Google is first and foremost an advertising agency whose customers are the advertisers. We mere mortals who use Google's services are resources, targets, whatever. Definitely not customers! If they can legally increase their profit by enabling Bluetooth, they'll do it.
How many people actually know how to look at the advanced settings of their browser?
