Yes, this is how Android and the Web in general handle permissions. I haven't yet seen what Google is planning for Manifest v3, but I suspect it will use a permissions system built around a similar model, with users getting explicit opt-in prompts for each permission the extension requires. (Though I'm not 100% sure of that yet, it's possible that sort of permissions system might not be practical for browser extensions for reasons I haven't anticipated.)