Hacker News Reader

The intent is to prevent man in the middle -attackers from getting access to those features.

Why would they need the fullscreen access? I could see the interest for cookies or local storage, but fullscreen?

So they can pretend to be your entire browser.