I don't understand why passing a new view matrix to webGL is such a security risk or why that needs to be shared with he site owner.
I also think a window with a dynamic view matrix would make more sense in certain cases. Some techniques work when rendered to a surface that would not work in VR, ie screen space effects.
It’s not exactly eye tracking, but you know some advertisers are going to use it to make ads that turn to point directly at you.
But I’m not sure the proposed tag is a good idea either. I have not used VR but I think it might be a good thing if web browsers in VR stay flat and can’t take over the space in front or behind them?
> it might be a good thing if web browsers in VR stay flat and can’t take over the space in front or behind them
IMO the preferred implementation would be for the <model> tag to be a window into a 3d space "behind" the browser that's only visible if you look through that window. Maybe a small area in front of the window would also be acceptable. You wouldn't want it taking over space outside its designated area though without either going "fullscreen" or getting some other form of permission.
I also think a window with a dynamic view matrix would make more sense in certain cases. Some techniques work when rendered to a surface that would not work in VR, ie screen space effects.