It's actually quite shocking that Google is allowing IDM to be abused. And I have to say that browser developers really need to do something about this, like building some kind of extensions sandbox.