Yes, there is a change that happened with MV3.
All MV3 permissions, including host permissions, are opt-in for users. This means that the user must grant permission to the extension and can do this either as per-visit or always for domain.
If a user has MV3 extension installed and it requires permissions to be run, it will show up in the taskbar or Unified Extensions Button with an icon indicating that action is required.