Probably the best thread to ask this on: Being paranoid, I want to install some extensions (and their updates, etc.), but I am afraid of originally malicious e

Probably the best thread to ask this on: Being paranoid, I want to install some extensions (and their updates, etc.), but I am afraid of originally malicious extensions, and of malicious-takeovers (as was very common, and still happens, for Chrome and Firefox extensions). Developers and their machines are, in general, more lucrative targets for bad actors than your average Web person. How do you protect your setup with minimal cost to usefulness and productivity?