I feel like browser extensions are one of the worst things to have come to the internet in terms of security. People just install them like they're nothing, assuming they're safe and secure because they're on the extension store - not a terrible assumption for the average person, tbf.
Basically every single extension you install is like "hey give me access to everything you type and everything you click on and every site you visit, and I'll change every instance of the word "Elon" to "fElon" for you. Sound fair?", and everyone just goes "Hell yeah! Let's do it!".
The only exception to this is IMO ones that have been proven in court to keep NO logs, like they claim. The only one I know of that has been tested is PrivateInternetAccess, which is why they're the only VPN I've used for like 10 years.