Thanks a lot for your feedback. When using the Keychain app extension I will grant access to all the websites i am using. Theoretically it could read all the passwords i am adding there. That is my biggest worry. In the end it’s coming down to which extension we can trust or not.