The addon requires the minimal permissions to change the headers which are webRequest and webRequestBlocking for all URLs. Firefox translates this to the "access all website data" permission, nothing I can do about it.