Is there a consensus on what media that wallet apps are able to show when pointed to in an NFT?

I know that when NFTs point to JPEGs using IPFS links then wallet apps can show them.

I’ve also seen people post videos of their wallets showing websites in the box where NFTs should be but I don’t know if it works for all wallets since there might be security restrictions.

If the NFT contains a link to a website and that website requests camera permissions or tries to call into the Ethereum provider api, will that work?

For example, if there is an NFT that is a movie ticket webapp and the webapp needs to prompt the wallet to sign a message as proof of ownership, would that be allowed?