Right, but Google is surely the one at fault here. There should be absolutely no reason that this extension can "change all my data on all websites", whatever the hell that actually means.
Not "change all my data on all websites" but "read the content of all websites I visit".
Because an extension that finds all button elements on all websites you visit, must necessarily start by reading the content of all websites you visit.
I was under the vague impression that Manifest V3 was supposed to prevent this sort of thing. But looking at the extension, it is using MV3. Maybe it really was just about weakening ad blockers.
Because an extension that finds all button elements on all websites you visit, must necessarily start by reading the content of all websites you visit.