From my understanding, the service worker doesn't live indefinitely in the background - it reacts to events. So without additional permission prompts, it will o

From my understanding, the service worker doesn't live indefinitely in the background - it reacts to events. So without additional permission prompts, it will only react when you load a page that's within the service worker scope. So I'm not sure what additional security concerns there are.