They stated in [1] that: > In Manifest V3, we want activeTab-style host permissions to be the default, with a number of extra options. Instead of being grante

They stated in [1] that: > In Manifest V3, we want activeTab-style host permissions to be the default, with a number of extra options. Instead of being granted access to all URLs on installation, extensions will be unable to request <all_urls>, and instead the user can choose to invoke the extension on certain websites, like they would with activeTab. Additional settings will be available to the user post-installation, to allow them to tweak behavior if they so desire. To me that reads that extensions won't be allowed to request <all_urls> anymore which would definitely increase privacy since they won't be able to get script access on every website. Some observational capabilities will still be available but from what I'm reading not as many. I would've liked the web request API to be deprecated and discouraged or under heavy scrutiny, if used but there was too much push back. [1] https://docs.google.com/document/d/1nPu6Wy4LWR66EFLeYInl3NzzhHzc-qnk4w4PX-0XMw8/ https://docs.google.com/document/d/1nPu6Wy4LWR66EFLeYInl3Nzz...