There really should be a warning system when extensions get installed, plus it's crazy how many abilities extensions have. They should be running sandboxed with limited access to the file system and limited access to website data, if possible.
When you install an extension it's your responsibility to check the permissions it requires, and I THINK there is a warning? Not sure. But if you have developer mode not enabled you can only install from store so
