The other nice thing about Safari’s approach is that for common extension functionality it is just a set of rules that are executed. So no malware can be run b

The other nice thing about Safari’s approach is that for common extension functionality it is just a set of rules that are executed. So no malware can be run because extension code isn’t actually reading the dom. Nor does it have access to load remote resources.