You're correct; it's not ideal. However, for payment gateway access, the extension currently needs to connect with Stripe.com, ExtensionPay, and internal API URLs. I'm planning to update the application to access specific URLs instead of all of them.