You can turn the button off in the preferences easily enough. I think they ask for site permissions so they can extract RSS URLs out of the page via aforementi

You can turn the button off in the preferences easily enough. I think they ask for site permissions so they can extract RSS URLs out of the page via aforementioned injected button. Either way, Chrome extensions have visible source, so it's not too hard to vet it.