They'll probably be less broken, with a proper API: https://wiki.mozilla.org/WebExtensions#Additional_APIs

That kind of keyboard permission could be used for keyloggers though, it's not something every extension should get.