Indeed, and had the permission been on the extension itself rather than a dependency and there been explanation of why it requires the permission when other rest clients dont, I'd probably have given it a go.

I'd be really interested to hear more about why the dependency is there and what the interplay between the two extensions and the cloud bit of the service is?