Black Canvas hasn't been updated since last year and Tampermonkey seems like a privacy invader.
That's a serious allegation. Care to back it up?
Later edit: After a bit of searching I also found that FAQ. They should really put that information on the chrome web store.
Well, no shit. How is TamperMonkey supposed to install extensions that require more privileges than itself? It needs full permissions because it allows scripts you install full access.