[seanwilson]

For what it's worth, if you create a new profile for Chrome extensions, they won't have access to your regular browser profile.

I do this for web developer extensions that typically need a lot of powerful permissions. So I have a Chrome profile that's full of web developer extensions, so they're isolated from private and security sensitive stuff like email and banking.

Similarly, you can do this by installing Chrome Beta or Chrome Canary for use with different extensions you don't want to take a risk with.

[nomilk]

I've often wondered what chrome extensions have access to. Is it completely safe to install untrustworthy extensions so long as the user profile is a new one?

Also, I have a wonderful one-liner [1] aliased in ~/.zshrc (opens chrome with a new user profile with one command)

    open -n -a "Google Chrome" --args --user-data-dir=$(mktemp -d)

[1] https://superuser.com/a/1652648/928461