Yes, it's a worrying trend. The question is what are browser developers going to do about this. Extensions should not be able to freely access all browser memory and files, plus extensions should be signed with digital certificates.
Here is some more interesting info about the risk with Chrome's current extension system. And in the second link you can read about how rogue extensions can steal your Facebook info: https://blog.mozilla.org/addons/2018/10/26/firefox-chrome-and-the-future-of-trustworthy-extensions/ https://www.bbc.com/news/technology-46065796
There was an extension, which evaluated privacy risks, including permissions, it was called policy or something, I can not find it. Firefox has "Project Insight". I do not worry much about security risks, since my browser Yandex uses Protected Mode, which disables all extensions (except trusted) on secure webpages like paypal. But there are some extensions, which are sneaky, but it can not be helped, like I use an extension for search, it requires an access to history, for no apparent reason.
Yes I read about it, will search for it. Here's another interesting article: https://bdtechtalks.com/2018/06/25/chrome-extension-safety-privacy-security/
It's called Extension Police, but the question is, can we trust them? https://www.ghacks.net/2018/06/29/extension-policy-for-chrome-vets-installed-extensions/
Google Is Finally Making Chrome Extensions More Secure May 30, 2019 https://www.wired.com/story/google-chrome-extensions-security-changes/
Chrome extension privacy crackdown begins Oct. 15 with Project Strobe Google will eject any extensions that don't comply with the new rules July 23, 2019 https://www.cnet.com/news/chrome-extension-privacy-crackdown-begins-october-15-with-project-strobe/ Chromium: Project Strobe: Updates to Our User Data Policy
New Google Chrome experiment warns of malicious and slow extensions https://www.bleepingcomputer.com/ne...iment-warns-of-malicious-and-slow-extensions/
