"Access all your data" is the (rightly so) scary wording for the permission to inject code inside the webpages you load, which is used by NoScript to provide selective protections (e.g. disable webgl per-site). Unlike most other software, NoScript does not collect ANY user data (let alone passwords), as clearly stated in its Privacy Policy. Furthermore, it is included by default in the Tor Browser, which would never allow anything like that.