Can you restrict add-on permissions to a specific container?

I was about to install an add-on but stopped when I realized the scope of its access. Is it possible to restrict add-on permissions to specific containers? (For instance: I don’t necessarily want to grant, ‘Access your data for’ across all containers.)

If not this would be a really nice feature, but I may be misunderstanding how tabs and/or containers work.

In general, is it possible for an add-on to defeat the security of using containers? Broad question I realize, but it kind of feels like add-ons have access to reach into all my container tabs in a browser that I’m trying to keep separate.