Thanks for your security concern! Since Atlassian had introduced custom domain support (https://support.atlassian.com/organization-administration/docs/add-a-custom-domain/), Jira URLs no longer always contain ‘atlassian.net’. To ensure consistent functionality across various configurations, we had to update the extension’s permissions.
Rest assured, we take security seriously and have implemented additional checks to guarantee the app only interacts with Jira instances and it will not affect any other websites you visit.

Thank you for bringing this up! We’re working on the fix. Sorry for any inconvenience this might have caused.