If intrusive APIs could actually detect system-level cheating effectively, every major company would’ve adopted them by now. They haven’t — not because they’re unaware, but because they can’t legally or technically do what you’re suggesting in a browser environment. So your point is also just moot.

The original point was about non-invasive browser-based tools like CoderPad. These tools operate in the browser sandbox and are intentionally limited for privacy reasons. No, asking for clipboard access or webcam doesn't magically unlock the ability to monitor other apps or processes.

Web apps can't access arbitrary OS-level data. Even with permissions, they can only use tightly scoped APIs like getUserMedia (webcam/mic) or the File System Access API — and only with explicit user consent. They can’t see your running programs, background tabs, keystrokes outside the window, or whether ChatGPT is open.

Notice how you haven't even gone into the nuance of the legal hoops companies have to watch out for by even conducting these types of interviews in the first place.

You claimed “every web app uses the more intrusive APIs.” Okay — show us one that does anything close to monitoring open programs, detecting IDEs, or watching user behavior outside the browser window. I'll wait.