[ocdtrekkie]

The issue is that Google fails to vet those extensions. At all. Google has decided it is better to serve malware and blame the user than invest a modicum of expense on scrutinizing code that has the capability to capture all of a user's personal data.

It's reckless and it's irresponsible. And it's unique to Google.

EDIT: Also, re: desktop computers, if you check out my Reddit comments, you'll find I've been actively advocating for developers to support UWP sandboxing on Windows, and mostly telling off their excuses why their apps need full system access.