Hacker News Reader

>should be able to have their permissions limited by domain

Does Chrome not support this? One more reason not to use it.

It does. For instance, here are the domains my reddit app is allowed access to: https://i.imgur.com/lRetX62.png

The non-reddit domains are for expando capability.