At the very least Google should detect "significant" changes in ownership and or the underlying account for extensions that have "important" permissions. With

At the very least Google should detect "significant" changes in ownership and or the underlying account for extensions that have "important" permissions. With this you could implement something where once changes are detected, users have to manually opt-in. Users who care about such things could look at the changes and see that sketchy changes have been made.