Yep, these days 99% of the userscripts I write use no special permissions or APIs provided by the userscript manager, it's just pure JS injected into the page.

Yep, these days 99% of the userscripts I write use no special permissions or APIs provided by the userscript manager, it's just pure JS injected into the page. The rare exception is when I need to do a GM.xmlHttpRequest for cross origin.