That udev rule seems to be mixing approaches - the uaccess tag adds user access, so doesn't need the mode and group which were commonly used before the uaccess tag existed. Also the 'plugdev' group doesn't exist on all distros, so if users need to check what group works on their distro if going the mode/group route.
Also you shouldn't need to unplug and replug the DAC on linux if following those instructions - the 'sudo udevadm trigger' should have the same effect. The problem with running it without extra filters is that it will retrigger all the other udev rules again too, which may have unintended consequences depending on what other stuff you have. You should probably use the --attr-match option to include idVendor and idProduct so you only trigger the rule you just added, or just not run 'udevadm trigger' at all and stick to unplugging/replugging.
Assuming linux users are technical and know what they're doing is probably less safe recently than it has ever been, given the numbers of people trying linux because their hardware isn't officially supported by Win11.
Those variations, and needing to install a plugin and server to make it work in Firefox, underline the lack of universality. Then there's the mobile browser compatibility issue:
https://caniuse.com/webhid
Please don't take this as a criticism of your work - as I said WebHID is probably the closest we have to a cross-platform method. I just want people to understand the limitations to where it can be used. It's a similar situation to using WebSerial for ESP32 stuff, or Web Bluetooth. The reason other browsers don't support it is the same too - they consider it an unacceptable security risk, much like linux not granting that level of device access to users by default, hence needing a udev rule or similar to do it.