I think the idea would be that it's easier to list common targets than to play after-the-fact whack-a-mole with malicious extensions. The former makes it less l

I think the idea would be that it's easier to list common targets than to play after-the-fact whack-a-mole with malicious extensions. The former makes it less lucrative to sneak your malicious code into an extension, because you don't get that window of being able to harvest data before it's noticed.