Some things that could be improved upon is better sandbox. Too many extensions seems to need my data on all sites. Maybe some extensions could work just as well with a copy of the DOM instead of the DOM itself?

And a policy that extensions must not be minified and some buttons on the extension view to read the source code with syntax highlighting and all.