But other questions is resonable.
If you can read code(it's very simple and made only for prototype purpose), you can always unpack extension or checkout code from https://github.com/Kein1945/btc-exchange-monitor
I setup permissions in manifest file only for trading urls:
"storage",
"https://btc-e.nz/tapi",
"https://btc-e.nz/api/*",
"https://poloniex.com/tradingApi",
"https://api.kraken.com/0/private/*",
"https://bittrex.com/api/v1.1/*"
],
Extensions asking only read permissions key (I mensioned that in options page)
And my last argument: I made this extension only for myself. My work solved my problem and thats enougth for me. I just want to share some good stuff with other people. All my arguments don't enougth for your? Ok, no problems, don't use it.