This looks extremely insecure and dangerous to me. All you need is for a user to click anywhere or interact with anything on your page and you then have full ac

This looks extremely insecure and dangerous to me. All you need is for a user to click anywhere or interact with anything on your page and you then have full access to their computer, given that you include a native plugin in your extension. Even if you couldn't include native plugins in extensions, you would still have full control of the browser, including hiding the extension uninstall link in chrome://extensions/ and keylogging every page. Edit: Nevermind, apparently it prompts the user before installation, unlike the Chrome web store.