The default SharePoint security applies to the Server Extension. Like any web service, it is executed by an authorized user in the ShareGate migration tool, so you require the appropriate rights or security credentials to do any kind of modification.
The Server Extension allows the ShareGate migration tool to perform operations that are available in SharePoint, but is not exposed in public interfaces.
The Server Extension does not allow users to perform any operations that they would not be otherwise authorized to perform.