[mcnemesis]

One solution I see (though not optimal), is to install only those extensions you really can't do without, and then have them disabled by default. When you need to use its function though, enable it (only for that short session), and then disable it later.

Otherwise, I have inspected many seemingly innocent extensions like JaSON and REST Console (both meant to run in own tabs, without need to read/modify data on sites I visit, but which nevertheless request for these permissions!). I quickly noted that many other extensions did request for these perms as well... So, for now, for the ones I can't uninstall, I'll just disable them, and only opt-in (maybe in incognito), when I need to use them.