It does by default, except for the files from the extension that the extension author has explicitly designated as content-accessible. It's explained ("Using w

It does by default, except for the files from the extension that the extension author has explicitly designated as content-accessible. It's explained ("Using web_accessible_resources") at the other end of the link.