As far as coracle goes I'm fairly sure if you click the login button, not advanced login, it defaults to using whatever NIP-07 extension you have. As far as all the blacklist pop-ups from avast goes, that could be for any number of reasons. Keep in mind most of those are most likely from self-hosted relays and avast NEVER says WHY it's been blacklisted, only that it has been.

To coracle asking from camera perms, you most likely hit the button NEXT to the login button which, from my best educated guess, is used for scanning QR codes.