Interestingly, Vimium's "Access your data on all websites" permissions can be less alarming than a similar notice only mentioning certain domains you care about, like stripe and coinbase.