Google justified this change by highlighting how extensions using the Web Request API could access and modify all the data in a network request, essentially being able to change everything that a user could do on the web (
which is pretty scary and problematic when you think about itwhich is a perfectly valid usecase of a user-installed extension).
Yeah, what now?