@dalias @webhat > But unless you have a seriously defanged browser, Mozilla or Google basically has push access to replace the code in any extension.

That is indeed another problem. Though at that point it's not "extensions are insecure" it's "the browser itself is insecure", unless specifically fixed as you allude to.