I edited my comment here, but the privacy concern with Chameleon stems from its ability to access and modify data on all websites. This access is necessary for the extension to function, as it needs to alter the user agent and other browser settings. Obviously not great when on secure websites.