On-demand permission is surely better. It's just too much trouble for me to implement it. Not worth the time. Anyway, it's open sourced and there are reviewers in Firefox team who would actually build the source code and verify the product.