4 ms·

Manifest V3 prohibits extensions from loading any remote code like JavaScript or Wasm files[1]. 1. https://developer.chrome.com/docs/extensions/mv3/intro/mv3-o

• tyingq 3y ago
  Right, I acknowledged that in the comment you're replying to. But the review process is weak. And, I don't need to load external code to exfiltrate stuff. For example, I can load an image with a specific name/path, or hijack functionality already on the page, like Google Analytics code. Generally, non-trivial extensions cannot be both secure and useful at the same time.