Momentum is a well-established new tab replacement productivity extension (~10 years old, 30K users, 4.4-star rating, Google-trusted publisher). All seven sensitive permissions (tabs, sessions, bookmarks, topSites, scripting, *://*/*, notifications) are declared as OPTIONAL — not required — in the bundled manifest; the ML model almost certainly counted these as required, inflating the risk signal. Network calls go exclusively to [domain withheld] (publisher-owned) and Datadog browser log intake (standard error telemetry carrying only diagnostic data — timestamps, error messages, storage estimates — not PII or browsing data). The permhash cluster of 50 extensions has 0% malware, directly contradicting the ML verdict.