>be ultra restrictive about what apps are allowed to do Chrome does this on some level via host permissions (http://developer.chrome.com/extensions/manifest.ht

>be ultra restrictive about what apps are allowed to do Chrome does this on some level via host permissions (http://developer.chrome.com/extensions/manifest.html#permissions http://developer.chrome.com/extensions/manifest.html#permiss...) and a content security policy (http://developer.chrome.com/extensions/contentSecurityPolicy.html http://developer.chrome.com/extensions/contentSecurityPolicy...) and is setting a more strict default security as manifest v2 gets phased in.