Does what it claims to perfectly right out of the box. Developer maintains the project (which is open source!) and is receptive to collaboration. The permissions could be more restrictive, sure, but it's not as simple a change as you'd believe, having read the code and tried to change them myself. That doesn't affect the functionality of the plugin, however, and it does exactly what is promised, without hiding how it does it from the user (since you can read the source).

If the permissions bother anyone enough, I'm sure Animesh would love to see a pull request that'll restrict them without breaking the plugin (: