They can get access to all browser traffic if they're configured to. They can also be configured for activation only on specific sites. It really depends.