The old problem of power vs. security. You can't trust your users will be smart enough to understand "this extension should't access all sites", but you can jus

The old problem of power vs. security. You can't trust your users will be smart enough to understand "this extension should't access all sites", but you can just block the functionality from all the non-evil developers.