"chrome privileges by default" sounds off to me, depending on what you mean by "by default". Add-ons can't just use Components without require("chrome"), which is visible in the manifest. So you have to ask for it - so although add-ons can acquire chrome privilege by just asking, "by default" seems like an odd way to express that.