Seems most extensions use the old proxy api which requires giving them full "read and change site data" access. A more recent API is available made for VPNs:
https://developer.chrome.com/extensions/vpnProvider
But I can't find any that use it.
Anyone know of any?