requestAutocomplete pops up a permission dialog to the user, it's not automatic on sites you haven't already granted permission to - the article mentions this.
I'm sure this is all thought trough but I'll wait for a bit before using this.
What my privacy concern is just a javascript phishing attack (nothing too complicated that a beginner can do). Not to say this feature wouldn't be nice, just making the suggestion that there is alot of room for concern here.