Great is the enemy of good. Especially when great is not even possible to achieve (wide public adoption of PGP). EDIT: And you seem to be saying that this is a

Great is the enemy of good. Especially when great is not even possible to achieve (wide public adoption of PGP). EDIT: And you seem to be saying that this is actively bad, which I think is just jumping the gun without identifying any actual issues. Having it be only partially secure until you install a browser extension and then having it properly secure most certainly falls into 'good' and not 'bad' or 'great'.