If you want the extension to provide functionality to a website it has to have access to that website.
thus the extension and any such app should be open source and verifiable. This is how browser extensions work.
it is a bit like any software that you install and run on your computer.