It only accesses 'google.*' sites.
Originally it only had a permission for 'google.com' but then it failed on 'google.co,jp'
It is not practical to list all google TLDs like 'google.com, google.co.uk, google.co.jp,' etc
The permission API at the moment doesn't have a system to include a wildcard in TLD and that is the reason a general all sites permission had to be used. I had asked (11 months ago) for a better API but it was not accepted.