Using the navigator.geolocation requires the user to accept the permission dialog showing up https://developer.mozilla.org/en-US/docs/Web/API/Geolocation_API. Once it got accepted the API can be used by the site.

My question is why does the permission transfer to other potentially external scripts loaded from that site as well? I consider this a privacy issue, as it can be used to track users.