Extensions can specify if they want read/change access to only one domain (or more). This extension could have specified medium.com alone.