> An egregious and nearly unbelievable oversight on Google's part. This describes Google's entire approach to browser extensions. It's so cosmically and hilari

> An egregious and nearly unbelievable oversight on Google's part. This describes Google's entire approach to browser extensions. It's so cosmically and hilariously bad, and because extensions grant post-decryption access, renders basically every other security and privacy effort they've ever done with web standards completely pointless. All that garbage about encrypting everything in transit is entirely irrelevant when the endpoint is a masterpiece of bad security design.