Agreed. I read "extension that alters or scrapes pages you visit" and I hear "quick and dirty hack that does nearly-blind poking around in a foreign DOM tree that could change at any time." It doesn't exactly inspire confidence that someone who would rely on such a fragile technique would put a ton of thought into security.