I think the problem is a plugin that can rewrite the url can rewrite the url to anywhere else which in effect becomes "read all your data". Firefox has taken s

I think the problem is a plugin that can rewrite the url can rewrite the url to anywhere else which in effect becomes "read all your data". Firefox has taken such side channel attacks very rigorously so almost any plugin doing anything remotely interesting will have such requirement.