> Modern browser extensions are written in JavaScript, making them portable, verifiable, and easily sandboxed - not something you get with an executable binary

> Modern browser extensions are written in JavaScript, making them portable, verifiable, and easily sandboxed - not something you get with an executable binary blob that until very recently ran in the same permission context as the local user - which on Win9x through XP meant root. Do you think this means that browser extensions are secure in the least?