[RheingoldRiver]

You're not wrong, but in this case the total source code is like 30 lines long so it's not hard to verify what it's doing yourself

[croes]

But that is independent from the way you install an extension.

You gain no security from an unpacked extension.