Ya nos2x, because it's opensource.. maybe alby is too I dunno. I think you can set it to be disabled on sites till you enable it but that gets annoying. I usually make it confirm every action though, except for DMs then I give it 5min.