The browser owns the prompt
MicAndCam calls the browser's media permission API only after you press a Start button. The browser decides whether to show a prompt, reuse a saved allow setting, or return a blocked error. Websites cannot open the permission pop-up whenever they like, and they cannot change a blocked setting directly.
That design protects you. It also means the fix for a blocked device is usually in the address-bar permission icon, browser settings, or operating-system privacy settings.