Edit:
On that note, what's up with the Firefox Add-Ons?
Currently, they are all setup so that to do something interesting, they need all the permissions.
Which leads to a natural market being created, of bad actors go shopping for Add-Ons they can take over.
Can something be done about this? For instance for this "SingleFile" addon. It needs to access the rendered document in the DOM to be able to introspect and save it all to a file.
But why does it need access to everything? Can't it have just permissions:
- "snapshot DOM once"
- "write to a single file"