[hartz]

This is also a good point. There's the related problem of the extension author selling the extension to a shady company for some extra bucks, who then pushes out an auto-installing update bundling it with malware/adware.

Example: Stylish -- https://arstechnica.com/information-technology/2018/07/styli...