The permissions on Stylish was only "Read and change all your data on the websites you visit", which appears to be the standard permission - I checked many extensions I have in Chrome, enabled and not ...