[kzahel]

You are right that adding new permissions will disable the extension until it is re-enabled. But android has a very similar behavior.

Still, I feel that using optional permissions and pointing out to the user why they would want enable the new permissions is the best option. Yes, it's more work for the developer.

I just released an extension to help identify high risk installed extensions: https://chrome.google.com/webstore/detail/privacy-guard/edca...