iOS Safari extensions do not receive network access, so there’s no way to exfiltrate. You’re trusting iOS more than Nostore in this case.