Google justified this change by highlighting how extensions using the Web Request API could access and modify all the data in a network request, essentially being able to change everything that a user could do on the web (which is pretty scary and problematic when you think about it which is a valid usecase of a user-installed extension).