Read only website access

I am confused. I am perfectly OK with Claude in Chrome reading whatever it can get to out on the web. I am not comfortable saying it can also change wherever it wants to. Why is my only choice to either approve every single access or give it permission to do anything? I don't trust it enough for the latter...