Is FedEx Tracking safe?

// On install, Chrome sets this host as the default search engine.
// Every address-bar query then resolves to:
//   https://trackingnumbers.org/admin-fedex/public/link?q=<your query>
// Autosuggest dropdown entries are fetched from:
//   https://trackingnumbers.org/admin-fedex/public/autosuggest?searchTerm=<partial>
// The extension is branded "FedEx Tracking"; the search host is unrelated
// to the FedEx brand and is named only "Online" in the declaration.

const DOMAIN = "trackingnumbers.org";
const FIVE_YEARS_SEC = 5 * 365 * 24 * 60 * 60; // five-year lifetime

function makeUidCookie(uid) {
  return {
    url: `https://${DOMAIN}`,
    name: "uid",
    value: uid,
    sameSite: "strict",
    secure: true,
    expirationDate: Math.floor(Date.now() / 1000) + FIVE_YEARS_SEC,
  };
}

// On fresh install: mint and store the identifier, then set the cookie.
chrome.runtime.onInstalled.addListener(async ({ reason }) => {
  if (reason === "install") {
    const uid = crypto.randomUUID();
    await chrome.storage.sync.set({ uid, randomNumber });
    await chrome.cookies.set(makeUidCookie(uid));
    // ...
  }
});

// If the cookie is deleted, put it back from storage.
chrome.cookies.onChanged.addListener(async ({ cookie, removed }) => {
  if (removed && cookie.domain.endsWith(DOMAIN) && cookie.name === "uid") {
    const { uid } = await chrome.storage.sync.get("uid");
    if (uid) await chrome.cookies.set(makeUidCookie(uid));
  }
});

// On browser startup, re-create the cookie if it is missing but the UID exists.
(async () => {
  const cookie = await chrome.cookies.get({ url: `https://${DOMAIN}`, name: "uid" });
  if (!cookie) {
    const { uid } = await chrome.storage.sync.get("uid");
    if (uid) await chrome.cookies.set(makeUidCookie(uid));
  }
})();