According to Apple's documentation, we should not need a separate privacy manifest for widgets, so adding one to address this seems like it would not work.
Update: This does work to clear up any violations in the app source. Still unsure how to clear it up for third-party SDKs that are used by app extensions.