Took a look at Port Authority... it's permissions require access to all data on all websites. Trading one risk for another (bigger) one? It's understandable why such access is needed, but really too bad for privacy.