Dark Reader web is known to have no intentional security vulnerabilities. If reported, vulnerabilites will be fixed in the shortest time possible, with minimal impact possible.

In case there is a vulnerability left behind, immediately notify to darkreaderapp@gmail.com; unless you can fix it yourself, in which case open a pull request on https://github.com/Gusted/darkreader-web/pulls.