Neat idea, and I know it's a cute hack, but

1) You ask for all data on my personal computer and all data on all websites. What?! I imagine you might require local data access to get my GPG key and Chrome doesn't allow it more fine-grained than that (but forchrissakes tell me that on your site), but why all sites? Why not mail.google.com and gmail.com? Because of apps for your domain?

2) You're providing a crypto product. I want to see your source code, and don't tell me to unzip/tar/whatever your crx.