About the permissions, the developer said it was the minimum permission setting they had to give the extension. You can see someone replying to a user's comment on the extension's review page.

I can't say it's chrome's fault in this case. The extension is effectively acting on every single web page, even though it's just CSS.