> You'd think you'd have to be in some kind of security type role to be able to do this if they had access / control over an extension on google employee comput

> You'd think you'd have to be in some kind of security type role to be able to do this if they had access / control over an extension on google employee computers. There are a lot of employee-written extensions at Google, published in an internal Chrome web store. I even wrote one in a few days and published it. Some of them are owned by teams in one way or another, but a surprising amount of developer tooling at Google is somebody's side project.