Thanks, for your positive feedback.
If you right click the extension, you should see the default is permission-less, it needs to be clicked to get permission -to then work on the current URL.
If clicking on the extension, you may hear audio clip for a ms as it takes permission.
Therefore it should not be in an active state, prior to clicking. If you are not able to reproduce this, and the problem is still existing despite the extension not having permission LMK I will look into it, but it will most likely require a bg.js