Why do you need to have a lot of permissions for the extension?
This extension would be able to read and alter web pages and see your browsing history on this website. This could include sensitive information, including passwords, phone numbers and credit cards.
You can change this later in the Websites section of Safari Settings.
Hi, I added a part to the GitHub repo explaining this, basically its this:
- The extension requires permission to "Access all websites" solely to detect video players and enable Picture-in-Picture functionality across different websites
- No data is collected, stored, or shared with third parties
- All functionality operates locally on your device
Because the user already has a card, it means it has been verified by the bank (AMLc, CTF, etc.), and the bank has the final say on each transaction. I based ThreadPay on the logic of "checkout as guest" when purchasing something online; in my case, you pay an individual rather than a merchant.
According to security considerations, there are three layers:
1. The bank is the base layer. At any time, the bank may limit, suspend, or enforce any regulation on the user card.
2. The provider - Most payment providers, such as Stripe, have their own risk analysis products.
3. ThreadPay - based on the observation we will enforce our layer of security also. (We don’t have one at the moment)
From the very limited screenshots, it looks like the IG team have done a great job with the UX. If they stay true to this and keep it focused, I think this will be the winner.
Focused UX is something I feel has been really lost by many apps coming out today.