[ksarw]

Ah I see, thanks for the additional context!

I was aware of the toolbar extension scams that used to take place, but not of this particular pattern you are mentioning of hand-offs.

Credibility is indeed a hard problem, with respect to both consumers and producers. I am reminded of the VLC story [0], and based on my experiences I think you can gain trust over time by your actions (hopefully this story is a valid one).

Regarding least privilege, we have minimized the requested permissions to the best of our ability (please let me know if that's not the case). I'll be looking more into the bookmarklet idea too as another approach while trying to maintain the usability.

[0] https://news.ycombinator.com/item?id=15372048