To be fair, general ad blocker will always require broad permissions, no matter what API it uses. There's no sense in ad blocker that works only on N sites.