It's either that or a browser extension which is even more dangerous.
That being said I don't think this app is going to do anything malicious.
Well, often this is not easy. I've tried to audit some extensions recently but a vast majority of non-open-source extensions are minified and heavily obfuscated. Unless you invest a lot of time, it's not easy to audit the code these days.