Why not enabling the use of the vibration API only after a user generated event, like it's currently being done for playing audio in iOS ?