[lxgr]

If only that were possible!

Manifest V2 doesn't even support fine-grained permissions like that (they have to statically declare all sites they ever want to access at build time, and users have to accept all of them at install time).

Manifest V3 is better and offers a dynamic API to request more permissions on a per-site basis, but it's still not perfect – for example, Chrome presents the "proxy" permission as "read and change data on all websites", so as a user, I have no idea if a VPN extension just wants the proxy permission, or write permissions to every site I visit.