[Web Install] Is `install()` or `getInstalledApps()` allowed from subframes?

[amandabaker]

To reduce fingerprinting risk, I assumed that navigator.install() and navigator.getInstalledApps() would not be allowed from subframes. Is there any reason that it should be allowed, and if so, do we need to modify getInstalledApps() to mitigate the fingerprinting risk?

cc @diekus @Kbhlee2121

[diekus]

No they cannot. Quoting the explainer: "This API can only be invoked in a top-level navigable and be invoked from a secure context."