The users just grant the permissions without even reviewing them. Thus, any of the applications could get access to your MetaMask account. Therefore, because of these reasons, it is preferred to use MetaMask Extension. Metamask | metamask Extension |