[sneak]

Presuming you're securing against gmail monitoring, Google in this case would be the eavesdropper/attacker.

Google controls the key/cert that allows for Chrome extension updating...