> The problem of browser extensions having "too many" capabilities allegedly boils down to some small subset of users stupidly or unluckily installing dodgy ext

> The problem of browser extensions having "too many" capabilities allegedly boils down to some small subset of users stupidly or unluckily installing dodgy extensions nope. "legitimate" extension authors get compromised - either their creds or they sell the extension to some other less reputable group.