If you get rid of the API it will just happen through malicious Chrome extensions instead. I guess that's an improvement in practical impact. Will the next arg

If you get rid of the API it will just happen through malicious Chrome extensions instead. I guess that's an improvement in practical impact. Will the next argument be that browsers shouldn't be extensible, because it's a liability with stupid users?