Not nearly every user will get it right, so extensions will probably still have to be monitored for malware for the foreseeable future, but it gives many users at least a chance at privilege minimization.

Power users who care about this don't need a GUI - a text file config in any format will do. Especially in this era of LLM assistance.