uBlock Origin elegantly presents why fewer permissions does not necessarily mean an extension is more trustworthy: https://github.com/gorhill/uBlock/wiki/Can-you-trust-uBlock-.... To me, free software and monetization are the primary criteria in deciding whether an extension is malicious or not.