Hacker News Reader

the browser itself has such permissions that allows it to override OS settings (and as a dev you just utilize these built-in capabilities)?

Yes, the extension just supply a UI for related API. You can't do anything on Web if no api behind the scene.