Because if you could do it withoug the user noticing it, other people could do it without users noticing it. And the hackers are good enough about this without any help.
Now, with an air application you may be able to do something behind the scenes with the users permission, but I don't know about that.