When asking permissions, Google describes the worst scénario because they have no way to know and Say what the developer does un his code.

But, hmmm, in 2023, really ? Google use chatgpt3, give it the developer's app or extension code, and that's all!