In a headless environment there is no popup channel, so the default policy must fall back to either direct execution or direct rejection, and the two paths carry different risks.