This concerns me.

XIII - yes, that's true as well. There are multiple reasons why this is needed for the 1Password extension.

Doesn't this actually improve your security?

I think it makes sure you only auto-fill your password on the actual URL of a service (not on similar URLs with typos or international characters)

Good to know. Thanks.

@"Mr. K." - stupefly is correct -- this has always been the case with 1Password extensions, it's just made more obvious now with some of the more-prominent warnings Apple has instituted.

This has always been the case with the 1PW browser extensions. You can't have a password extension with any real functionality unless the extension can read the URL and access the DOM. You can always forgo the browser extension and manually copy/paste/save login creditals.