Why does this add-on require mandatory access to private windows? This is contradictory to its privacy-first, no-cloud-used approach.