This is a Play Store curation failure _as well as_ a bug in the app.
This sort of fault shouldn't have been allowed to pass.
This sort of fault shouldn't have been allowed to pass.
The user has to agree to use that app to open http links.
Sure Google could kick this dev butt and ask them to use a more focused intent filter but that's way less of an issue than an extension siphoning all your web browsing.