I am using Startpage and its extension requires only one permission "Access your data for sites in the startpage.com domain". Works much better than DDG anyway. Qwant has two extra optional permissions, but they are turned off by default.