This page contains no audio source whatsoever. The <video>
element below has no src, no audio track, and never plays.
Setting video.volume = 0.12345 activates injected renderer
code (simulating a compromised renderer) which sends four forged
MediaPlayerObserver IPCs to the browser process:
OnMediaMetadataChanged(has_audio=true),
OnMutedStatusChanged(false),
OnUseAudioServiceChanged(false),
OnMediaPlaying().
The browser accepts these without validation and marks the tab as
"currently audible": the speaker icon appears in the tab strip and
WasRecentlyAudible() returns true, bypassing
the Auto-Picture-in-Picture audibility gate.