Twitch doesn’t host your backend, you do, so the exact same requirements apply.
All communication between your frontend and EBS must be over SSL (so HTTPS or WSS), and while a self-signed cert can be made to work in testing, it is not suitable for review or production as users of your extension will run into errors that the cert is untrusted.