There is more info on the github page's FAQ: https://github.com/lartsch/FediAct
"Why does it need permission for all websites?"
"The addon needs to determine whether or not the site you are currently browsing is a Mastodon server. For that to work, it requires access to all sites. Otherwise, each existing Mastodon server would have to be explicitly added."