[victorhooi]

Chrome extensions are installed via the Chrome Web Store - so much like say, the Apple App Store, you'd need to get it past both the automated checks, as well as the manual checks.

To be honest, I've yet to actually see any rogue extensions on the store - have you seen any?

Furthermore, each time you install an extension, you need to explicitly grant it rights to various things. So there's definitely some user attentiveness needed there, just in case.

But if you want to be heavy-handed (and have GSuite and a Chrome management license) - you can actually set it up so they can only install whitelisted Chrome extensions. So you could whitelist all the common ones you think they'd install, and if they want additional ones, they can request them:

https://support.google.com/chrome/a/answer/1375694?hl=en

A lot of corporate/school environments have it setup this way - they whitelist known good ones, and the admin will add more when people request it.

To be honest though, most non-tech savvy parents probably don't need extensions - my mother for one hasn't installed any. The Chrome browser itself covers most of their use-cases.