>they basically get read/write permissions on every web page you visit.

But you can select on which sites the extension is active. You can even make it only active when you click on it.