I think perhaps we need to agree on the real problems that exist. It's not like users are getting their data stolen left and right out there and man these exte

I think perhaps we need to agree on the real problems that exist. It's not like users are getting their data stolen left and right out there and man these extension trojans are winning the battle against good extensions and we just can't shake 'em. All your base... are belong to us. It seems the status quo is that extension fraud, while entirely possible as this article demonstrates, is not actually a problem. If you don't trust a piece of software to access your webpage content then don't grant it the permission to do so. I think the onus is on alarmist pieces like this to bring the data supporting the existence of a problem to be alarmed about in the first place. I mean, raise your hand if you've been pwned by a malicious Chrome extension recently...