They both have full access. some may say “do you trust these publishers” – but the way extensions are designed, there’s no way to trust them. You have to be extremely vigilant and inspect the code every time the extension updates, and you aren’t notified when there are updates.

I wouldn’t install any extension permanently. I only keep Lastpass and it’s disabled until it’s needed for login.