Right now only files can be added to the dynamic whitelist from the extension. It should be possible to add directories as well since this is the only way to actually exfiltrate files.
There are some edge cases where the IPC to the oz-daemon fails or is slowed down and this can cause gnome-shell lock ups. The commands should be migrated to async mode to prevent this.