The extension supports over 500 sites and needs to modify the page to show the paywalled content, so the permission list includes over 500 domains. There’s no good alternative to these permissions. You can inspect the source code to verify that the extension’s behavior is legitimate.