Thanks for this—this is instructive! Definitely going to change this on the next version submission. You’re right; if I want to support additional websites, then I should explicitly add them to host_permissions.