Safari Web Extension: This extension can read ... including passwords...

I want to migrate from a Safari App Extension to a Safari Web Extension, but don't know how to get rid of the message, telling users that my extension can access their passwords. Here is a message which I see:

I was thinking that this might be because all Safari Web Extension get this type of access, but I have a Safari Web Extension which does not require such level of access:

Here is the manifest:

{
    "manifest_version": 2,
    "default_locale": "en",

    "name": "__MSG_extension_name__",
    "description": "__MSG_extension_description__",
    "version": "1.1",

    "icons": {
        "48": "images/icon-48.png"
    },

    "background": {
          "scripts": [
              "background.js"
          ],
          "persistent": true
      },

    "browser_action": {
        "default_popup": "popup.html",  
        "default_icon": {
            "16": "images/toolbar-icon-16.png"
        }
    },

    "permissions": [
        "nativeMessaging", "tabs"
      ]
}

and here is the Info.plist file:

Here is the entire code of the extension: https://github.com/kopyl/web-extension-simplified