Manifest V3: Runtime Permissions

[DK]

(Posting here after seeing Devin's request from Jan 2019)

I'm really excited to see the focus on user privacy and security in the Manifest V3 proposal — thank you for making that a priority.

In addition to requiring host permissions to be granted at runtime, can I propose that Manifest V3 require *all* permissions with warnings to be granted at runtime? Developers should have to explain to users why they require sensitive permissions.

Android made a similar change 5 years ago, and doing this for Chrome extensions would require extension developers to think more carefully about the permissions they ask for, resulting in better privacy and security for users. (I ask for each permission at runtime in my extension Intention and have had many users express appreciation for the approach.)

I know it's a bit weird having an extension developer ask to make the platform *more* restrictive, but I believe this change would go a long way in protecting users' personal data and improving the extension ecosystem.