Is ExpressVPN: VPN & proxy browser extension safe?

ExpressVPN is a legitimate commercial VPN extension. The extension implements externally_connectable with <all_urls> without origin validation in message handlers, which presents a moderate security concern. All network communication is with localhost for VPN app integration, no undisclosed data collection detected.