When extensions auto update, the user cannot see (and audit) the full list of new permissions. This is a security concern.
For example, what if the extension below was hiding paypal.com under the "Access your data in 3 other domains"?
I suggest inste...
