joystmp Orion already has this.
Enhanced security permissions for extensions are one of the signature feature of our extension support (and no, Chrome does not have it).
It is visible both when you are installing extensions:
and also changeable at any time, per site level, through website settings
Frankly I am astonished that you were not aware of this, given how (I thought) visible it is and your experience with Orion. I can only imagine that first time users will have no idea Orion has this.