That's a valid option. The whole thing in my head was that it was supposed to be automated, and eventually figure out how to narrow down the pages where it runs. I know seeing the permissions to collect data on every page just sounds scary lol but I was hoping the fact that the extension isn't touching any kind of backend or anything external would balance it out. I will think about that though, thanks for the input!