Hi, a feature I integrated early into my signer nvault, was to optionally inject the window.nostr object. I'm not sure how your extension handles it, but an Idea I wanted to share. Only injecting the window.nostr object if the site was allowed. I wanted to hedge against js fingerprinting. Most basic fingerprinting scripts attempt to capture or serialize the window object and nip07 users can more easily be tracked if the object it present on every site.