Is there a way for a website or app to view the contents of my internal storage without my permission?

I see there are a lot of articles about the restrictions imposed on JavaScript in Windows Chrome. It can't access the filesystem of a user without the user himself uploading it to the server of the PWA. But I see none about JavaScript running on Android Chrome. Are there the same restrictions on JavaScript in Android Chrome as that of Windows? For example I open a PWA on my Chrome, suppose Telegram, so will Telegram be able to access my files like my photos, videos, documents etc. without my permission? Concisely, if I grant storage permission to browser X and open a web application Y in that browser, does that mean that Y can also access my media, files etc? JavaScript aside is there any other way for any PWA or web app or website to view the contents of my internal storage without my permission?