Opting in sounds like the better pattern here. I would also appreciate if I could opt-in giving the extension network access instead of extensions getting it by default.