Do you have a reasonable example of why a library that would call location or history?
All I can think of is "using query string as getenv() for random debug hacks" or "using history as a hack to synchronously reach the structured clone algorithm", neither of which a library should do (but both easily emulatable).
So the big idea is "simulate user keypresses and mouse events", and it works if the user answers "yes" to the prompt "Program X wants to control other programs on this computer".
To be fair, Steam games request that permission, so users may be trained to accept it.
I thought so too, but the paper version apparently has a ridiculously high (user) error rate. When the failure mode is an extra human it might be a net win.
Funny how the waves are always extra blurry when that happens.