> Browser extensions must be open-source. You download the source when you install the extension. It's a zip file. You can unzip it and examine it yourself. Ev

> Browser extensions must be open-source. You download the source when you install the extension. It's a zip file. You can unzip it and examine it yourself. Even if the developer provides a GitHub repo, how do you know it's the same as the version in the extension store? Maybe there's a server component too, but again how would you know that the source provided is what's actually running on the server?