Comment by alexanderby

The browser doesn't separate what injected script can do and what it can't. Regarding Dark Reader, it needs to know page URL to determine if it is blacklisted by your settings or not.