I think it's more about safety, what extensions can't do. If native code escapes the sandbox, game over. If JavaScript runs amok, it's a lot harder for it to do

I think it's more about safety, what extensions can't do. If native code escapes the sandbox, game over. If JavaScript runs amok, it's a lot harder for it to do anything dangerous. Browser vendors have learned a lot from all those Flash vulnerabilities.