Is Momentum safe?

Momentum is a widely-used productivity new-tab extension. It communicates with api.momentumdash.com for settings sync and uses PostHog and DataDog for analytics/logging. Several postMessage handlers lack origin validation in internal pages, but no undisclosed data collection or content script access to arbitrary pages was observed.