Even the 1Password extension which I absolutely rely on injects huge JS into every site; screws up lighthouse scores and leaves me ill-at-ease. Extensions are an incredible attack vector.
Personally I think extensions like 1Password are the worst. I've had talks w/ so many people at work who want me to install them, I tell them about the awful things that are going to happen with these vendors, then they come true.