I understand your concern. The extension no longer requires these permissions. These were added to enable the JavaScript API. The API is now an optional setting.