Just keep in mind that they could theoretically read all your internet activity going through Firefox/Chrome the same way any VPN can

It only gets permission for twitch's domains and their own domain, so the only thing it can read is basically your twitch activity, which is basically a given.