In the early days I was excited by extensions, but through the years I've come to really accept that the most important security risk on our computers is the browser, and that it is too important to risk compromise to only the most well-known, vetted extensions: e.g. ublock origin, noscript.

It seems there should be a way to allow a lot of customizability/power to these tools without actually letting the extension send data home or even see the actual data